Remco Haszing

@remcohaszing

Open source software developer, cat servant, coffee to code converter, metalhead 🤘

245 Siguiendo912 Seguidores1280 Publicaciones

Bluesky

¿Es tu perfil?Reclámalo y remcohaszing.dirty.social es tuyo.Reclamar perfil

Remco Haszing@remcohaszing· 1d

They sure are

The tsgo command highlighting type errors inside of MDX files.

Remco Haszing@remcohaszing· 8d

I just had a cat run installed for Pura. I’m really happy with it, but also mixed feelings because it was supposed to be for Impa too.

Cat sitting on top of a table, looking from a balcony in a cat run

Remco Haszing@remcohaszing· 28d

After a week long struggle for her life, Impa has passed away.

Remco Haszing@remcohaszing· Jun 10

Well… I am 😅 A lot of them

Remco Haszing@remcohaszing· May 22

Depite all recent supply chain attacks, this has been the biggest threat to my projects lately. I can’t leave my laptop unattended for 5 seconds anymore 😹

Remco Haszing@remcohaszing· May 19

I installed a new script into ~/.local/bin/bun Hopefully this will fool some malicious scripts into thinking they ran succesfully.

#!/usr/bin/env bash

echo 'Attempted to run bun'

Remco Haszing@remcohaszing· May 8

One of my cats has found a new favourite spot

Remco Haszing@remcohaszing· Apr 27

I brought my cats a new friend from Legoland

Remco Haszing@remcohaszing· Apr 18

Sometimes my cat likes to lie doen pretty much on my face

Remco Haszing@remcohaszing· Apr 2

This distinction between malware and vulnerabilities in the GitHub security tab is new, isn’t it? It’s a good distinction.

The GitHub security and quality side menu, listing: Dependabot, Malware, Vulnerabilities, Code scanning, Secret scanning, Security policy, and Advisories.

Remco Haszing@remcohaszing· Mar 13

Too late

2 black cats and an octocat in the shadows

Remco Haszing@remcohaszing· Feb 27

This set is pretty cool ⚔️

Link and Princess Zelda fighting Ganon in a castle that’s falling apart.

Remco Haszing@remcohaszing· Jan 7

We got a lot of snow as well

A black cat sitting in front of the window with a snow covered tree outside.

Remco Haszing@remcohaszing· Dec 16

“I guess my cat is using this” is the purrfect reason to skip an activity

Remco Haszing@remcohaszing· Dec 10

What do you think this HTML means? It might not be what you expect.

<svg><foreignObject><br></br></foreignObject></svg>

Remco Haszing@remcohaszing· Dec 4

A while ago I reported a security advisory for a project I maintain. Does that mean the advisory is going to be there forever? Can I close it at some point? The vulnerability is fixed. That counter on the GitHub Security tab is annoying.

The GitHub repository tabs showing: Code, Issues, Pull requests, Actions, Security (1), Insights, Settings.

Remco Haszing@remcohaszing· Dec 3

Haha awesome. I got some free swag for making contributions to @vscode.dev.

Remco holding an Octocat pluche, some stickers and wearing a VSCode hat. There’s also a black cat.

Remco Haszing@remcohaszing· Nov 8

In the logs I see no indication that trusted publishing is being used. However, I do see that provenance is published. You use a third party tool that hides details. github.com/remcohaszing...

Run npm publish *.tgz
npm warn Unknown user config "always-auth". This will stop working in the next major version of npm.
npm notice
npm notice 📦 estree-util-value-to-estree@3.5.0
npm notice Tarball Contents
npm notice 1.1kB LICENSE.md
npm notice 9.5kB README.md
npm notice 1.2kB dist/estree-util-value-to-estree.d.ts
npm notice 538B dist/estree-util-value-to-estree.d.ts.map
npm notice 22.5kB dist/estree-util-value-to-estree.js
npm notice 17.3kB dist/estree-util-value-to-estree.js.map
npm notice 1.4kB package.json
npm notice 22.2kB src/estree-util-value-to-estree.ts
npm notice Tarball Details
npm notice name: estree-util-value-to-estree
npm notice version: 3.5.0
npm notice filename: estree-util-value-to-estree-3.5.0.tgz
npm notice package size: 16.1 kB
npm notice unpacked size: 75.8 kB
npm notice shasum: cd70cf37e7f78eae3e110d66a3436ce0d18a8f80
npm notice integrity: sha512-aMV56R27Gv3Qm[...]lWP9tKk6ghRZQ==
npm notice total files: 8
npm notice
npm notice SECURITY NOTICE: Breaking changes starting October 13, 2025. New tokens will be limited to a maximum lifetime of 90 days, and TOTP setup will be disabled. Classic tokens will be revoked in November. Update your CI/CD workflows to avoid disruption. Learn more: https://gh.io/npm-token-changes
npm notice Publishing to https://registry.npmjs.org/ with tag latest and default access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=637432527
+ estree-util-value-to-estree@3.5.0

Remco Haszing@remcohaszing· Nov 8

GitHub Actions is the publisher. This is visible in the npm website search results as well as the `npm search` command: www.npmjs.com/search?q=est...

A screenshot of the search result linked in the post. It shows estree-util-value-to-estree is published by GitHub Actions

Remco Haszing@remcohaszing· Sep 10

What would it look like if we allow MDX in props? That means it’s no longer JavaScript. What if we then use curly brackets to allow expressions? That deviates further from JSX. It also conflicts with JavaScript object notation.

<div
children={
<span>
**strong text**
</span>
}
/>

{/* If we allowed this… */}
<div
children={
{
<span>
**strong text**
</span>
}
}
/>

{/* … this would no longer work */}
<div children={{ color: 'red' }} />

{/* So this would be the alternative */}
<div children={{{ color: 'red' }}} />

Remco Haszing@remcohaszing· Sep 10

MDX needs to balance JavaScript and markdown syntax. Every choice has pros and cons. At the AST level, MDX elements may have mdast content as children. Its props are ESTree, same as for example expression statements. This offers a nice way to escape MDX syntax.

{
<div>
I’m a **software developer**
</div>
}

Remco Haszing@remcohaszing· Aug 28

I believe that’s a macOS thing. Here’s the same on my Linux machine.

$ cat test.mjs
const startTime = performance.now()
process.title = 'node (example)'
const endTime = performance.now()

console.log((endTime - startTime).toFixed(2), 'ms')
$ node test.mjs
0.01 ms

Remco Haszing@remcohaszing· Aug 1

It’s really cool to be working on variable font sizes, improved line wrapping, and RTL support in Monaco editor / @vscode.dev. Also fun to learn about RTL and learn how it fits in this mostly LTR world.

Monaco editor showing the intro text of Lord of the Rings in both English and Hebrew. A word is made bigger and blue. A whole is made bigger and green. The Hebrew text is aligned to the right.

Remco Haszing@remcohaszing· Jul 25

It’s the same, except I use Linux.

Visual Studio Code version information. Using VSCode 1.102.2.

Remco Haszing@remcohaszing· Jul 25

Nope

Visual Studio Code with the Copilot side bar. There’s no X-button.

Remco Haszing@remcohaszing· Jun 5

We just got a new box

A cat sitting in a My Nintendo box which has a picture of Super Mario.

Remco Haszing@remcohaszing· May 22

I’m a bit confused about this RSC detail. This component renders fine, but the server responds with an internal server error. Does this means the components marked with 'use client' are allowed to use the DOM, but not the module?

'use client'

import { useEffect } from 'react'

console.log('module', document)

export function Test() {
console.log('render', document)

useEffect(() => {
console.log('useEffect', document)
}, [])

return `Test ${document}`
}

GET http://localhost:3000/test 500 (Internal Server Error)
module #document (http://localhost:3000/test)
render #document (http://localhost:3000/test)
render #document (http://localhost:3000/test)
useEffect #document (http://localhost:3000/test)

Remco Haszing@remcohaszing· May 11

And then there’s toHast

The band Rammstein wearing masks in de clip from their song “Du Hast”

Remco Haszing@remcohaszing· Apr 25

This is true, but it is possible to generate invalid DOM structured dynamically. So it may be possible to nest a <form> inside a <p> tag when using frameworks, or simply by using document.createElement().

Chrome developer tools elements inspector showing the following HTML structure:

<p>
paragraph
<form>form</form>
paragraph
</p>

Remco Haszing@remcohaszing· Feb 28

In case you’re wondering, this did the trick!