Skip Navigation
InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)CA
castarco @programming.dev
Posts 5
Comments 4

How to create a React components ESM+CJS library

blog.coderspirit.xyz Create a React components ESM+CJS library

Learn how to create a React component ESM+CJS library using Rollup, TypeScript and Storybook

cross-posted from: https://programming.dev/post/3007051

> Tutorial on how to create dual ESM+CJS React component libraries.

0

How to create a React components ESM+CJS library

blog.coderspirit.xyz Create a React components ESM+CJS library

Learn how to create a React component ESM+CJS library using Rollup, TypeScript and Storybook

Tutorial on how to create dual ESM+CJS React component libraries.

0
blog.coderspirit.xyz Beyond semantic versioning: updatePolicy

Some random thoughts on how to make NPM package updates a bit safer

Beyond semantic versioning: updatePolicy

Some random ideas on NPM update policies

I'll start saying that what follows is the kind of stuff that I'm always a bit afraid to share because I mostly expect indifference or criticism, but I guess that there's no point on writing about it if it's not shared afterwards.

For a few weeks I've been thinking that, while semantic versioning is awesome, in some situations is not enough. Not everyone follows it, people break the convention accidentally, and we lack tools to manage the complexity that arises from it.

So I wrote a draft of a proposal that intends to surface some of the hidden complexity behind dependencies management to make it easier to tame, with the hope that it can help to reduce problems due to dependencies' breaking changes.

If you are interested in JavaScript or NodeJS development, I'd love to have some input from you (this also includes the criticism I always fear, as long as it's constructive 🤓)

4
A better way to use Dotenv
  • Sourcing the .env requires extra knowledge about shell scripting (even if it's basic knowledge, not everyone has it).

    On the other hand, not all shells are POSIX compatible (for example, PowerShell in Windows), so if we want to make a cross-platform solution, it becomes a bit more complicated (and also requires more knowledge than the previous case).

    Regarding what you commented about those incompatible "improvements", I understand what you mean, but until now I didn't find any case of this (so far, variable expansion is a native functionality of most shells nowadays).

  • www.theregister.com NPM registry vulnerable to 'manifest confusion' abuse

    Failure to match metadata with packaged files is perfect for supply chain attacks

    NPM registry vulnerable to 'manifest confusion' abuse
    4
    dev.to A better way to use Dotenv

    Preface In the ever-changing world of NodeJS development, the choice of tools can...

    A better way to use Dotenv

    For a while I've noticed that many people use dotenv in a suboptimal way, so yesterday I took the time to write a short article about better usage patterns (pretty basic stuff, so if you are an expert it's likely that you will find it boring):

    3