EOL Dataset: Find every EOL dependency in your stack. Free. In 5 minutes. | Product Hunt Your SCA checks for CVEs. It doesn't check whether anyone is still maintaining the software. That's a different question, and until now, no tool answered it well. We track lifecycle status across 12M+...

HeroDevs just launched our EOL Dataset on ProductHunt. EOL Dataset is a free tool that tracks software lifecycle status across 12M+ package versions using official EOL declarations and ML-based detection of maintainer abandonment. Check it out - www.producthunt.com/products/eol...

HeroDevs Blog | HeroDevs at VulnCon 2026 HeroDevs' VulnCon 2026 recap: Updates on CVE program scaling, NVD enrichment changes, AI's impact, and Open Source vulnerability management shifts.

Just wrapped up #vulncon2026 - fascinating conference and some exciting updates for the vulnerability space. I put together my thoughts on the conference here - www.herodevs.com/blog-posts/h...

Node excitement 😉

Congrats to @marcoippolito.dev on making it official: type-stripping in Node 25 is now declared to be stable 🎉

You can run: node index.ts

The capabilities have not changed since Node 24. This is purely a maturity indicator.

A screenshot from the tsup repository showing a text above the heading: "Warning: This project is not actively maintained anymore. Please consider using tsdown instead. Read more in the migration guide".

tsup is not actively maintained anymore 👀

With >9M NPM monthly downloads and >10k GitHub stars, tsup is undeniably a popular choice for bundling. Unfortunately, it is not under active maintenance anymore.

Thanks to @egoist.dev & contributors for all the work on tsup 🙏🏻

Preview of the linked PDF

ANNOUNCEMENT: I'm looking for work!

I'm a JavaScript/TypeScript expert with a ton of experience in Node, ASTs, Testing Frameworks, Docker, and more!

- 10 years experience
- Former core maintainer of Prettier
- 315 GitHub repos, 198 npm packages

suchipi.com/Resume2025.pdf

Chicago ✊

HeroDevs Blog | Securing Transitive Dependencies in End-of-Life Software: A Guide Learn how to secure your JavaScript applications against vulnerabilities in transitive dependencies—especially when using end-of-life (EOL) packages. This guide covers npm versioning strategies, updat...

Just put together a guide on the often-overlooked challenge of securing transitive dependencies in End-of-Life JavaScript software. If you've ever wondered when to use ^ vs ~ in your package.json (and why it matters), check it out:

www.herodevs.com/blog-posts/s...

#JavaScriptSecurity #security

At HeroDevs, we’re actively working with key CVE program stakeholders and other cybersecurity vendors to chart the path forward.

As we wait to see what the future of the program looks like tomorrow, we stand firmly behind the CVE program and are committed to ensuring its longevity indefinitely.

Cybersecurity World On Edge As CVE Program Prepares To Go Dark MITRE’s CVE program may shut down as DHS funding expires, threatening global cybersecurity coordination and exposing critical gaps in vulnerability tracking.

"This isn’t just about maintaining a database. It’s about maintaining trust in the systems that protect us all."

www.forbes.com/sites/tonybr...

The CVE program for tracking security flaws is about to lose federal funding CVEs are used by Microsoft, Apple, Intel, and many others.

The CVE program for tracking security flaws is about to lose federal funding

I've been migrating legacy software systems for years. AI can speed things up when directed by an expert in the source and target frameworks, but it's still an incredibly delicate process. Best case scenario, they get stuck in QA for years. Worst case, they skip QA and SSA recipients get harmed

Got to see Lupe Fiasco at the #grizzlies halftime show yesterday! All in celebration of retiring the Grindfather's jersey.

It's pretty awesome that a few htmx attributes are enough to enable lightning fast live updates to a page. No additional framework required.

Yellowcard Ocean Avenue Vocals YouTube video by Digital Split

IF I COULD FIND YOU NOW THINGS WOULD GET BETTER

m.youtube.com/watch?v=HrRp...

Another Grizz game, another chance for in-stadium lightning fast box score updated.

#grizznation #memphisgrizzlies #cloudflare #astro #htmx

boxscores.live/bf40b3ca-ad5...

Bounce back dub 🏀🔥
#memphis901
#basketball

If anyone is watching the grizzlies game in-stadium tonight, here's my widget for checking box scores, with lightning fast load times ⚡⚡⚡

boxscores.live/9b389e50-506...

#grizznation #memphisgrizzlies

Hey Grizz fans! Here's a little widget I put together last weekend for tracking box scores live. If you're watching at the stadium it should load faster than any app available!

#grizznation #cloudflare #astro

boxscores.live/2173cbd0-81e...

That looks good! I got a ninja cream a few months ago and it's awesome. I'll have to try out this recipe next

Any favorite recipes?

I'm working on a little side project, and the api I'm hitting is making me convert timezones 😭. At least there's `Intl`!

---
new Intl.DateTimeFormat('en-US', {
timeZone: 'America/Chicago',
year: 'numeric',
month: '2-digit',
day: '2-digit',
});
---

Configuration | Cloudflare Pages docs Pages Functions can be configured two ways, either via the Cloudflare dashboard ↗ or wrangler.toml, a configuration file used to customize the development and deployment setup for Workers and Pages Fu...

Just burned a 40 minutes debugging wrangler.toml issues. Note to self, read the docs!!! At the very top of Cloudflare's configuration page they recommend running `npx wrangler pages download config` instead of writing one by hand.

developers.cloudflare.com/pages/functi...

#cloudflare

FYI I did in fact do it haha.

I missed the grizzlies game last night, looks like Scotty Pippin Jr was on fire!! 🔥🔥🔥

#grizznation

I'm building a small widget that consumes two rate-limited endpoints. I want to cache results for a minute for each endpoint using Cloudflare Workers.

Do I:

1. Create one Worker, using caches.default to manually handle caching; or

2. Create two Workers, each using Cache-Control headers?

Do I do it? What's one more domain? Haha

Way to go Danny!!!!

Latest updates to effect() in Angular Authors: Alex Rickabaugh Mark Thompson

Another Angular v19 tidbit: the `effects` allowSignalWrites flag is entirely removed, allowing effects to set signals by default.

Note that `effects` are still in developer preview.

I try to avoid effects if feasible, preferring rxjs over effects.

blog.angular.dev/latest-updat...

#angular

#grizznation #memphisgrizzlies

Huge first half from Luke Kennard, Des, and Jaylen Wells. Let's keep it goin!

#grizznation #memphisgrizzlies