pmestha
Block AI from installing malicious NPM packages
The keyv worm ate 400 NPM packages in 90 minutes
In UiBun you can:
1. Drag & drop pre-made BunUI template blocks 2. Import your own HTML/tailwind code blocks (including TailwindUI and other UI kits) 3. Export production-ready HTML code (Download zip)
I hope y'all like it
Peace
I've been trying to find a free kanban board for personal use but couldn't find any that looked good. So decided to build one.
This stores all data in localstorage - so you can use this without any login/signup. Feel free to use it as you please.
Prasanna
Ask HN: What books do you recommend for marketing a SaaS?
Paid NPM packages are gaining popularity
Somebody built an app for conducting sprint retros
I wanted to eradicate this redundancy hence started working on a visual editor that exports code.
An alternative to Figma that exports code
Ask HN: Would you rather fund an open-source project or develop it in-house?
If you are a company - what would you choose? Building from scratch, or sponsoring an open-source project so that it is well maintained?
Shadcn UI is gonna blow your mind
More than blocking pipelines, This plugin doesn't throw errors for an entire package if only certain methods are vulnerable. For example, in `lodash` only 3 methods are vulnerable. So, it would be wrong to flag the entire package as vulnerable, instead only throw errors if the vulnerable methods are imported/used.
That's why my ESLint plugin comes into picture and feels much better than many other tools available
ESLint plugin to detect vulnerable imports
For example, fullpage.js - the only way the developer could make money is by selling code. Same applies to several javascript libraries.
Ask HN: Is it a good practice to provide open-source version of your paid app?
Hello hackers,I am Prasanna, the founder of PrivJs (https://privjs.com) - Internet's first open-core software marketplace.While building a few products, I was wondering if it could be a good practice to release a chunk of my paid software to the open-source community? Will that have any adverse effects on the product? Or will it benefit overall?-Prasanna