Category: articles

Jun 11th 2026

Optimizing Self-Hosted Fonts with fonttools and brotli

Self-hosted Lato and Inter were dragging down a Next.js build. Subsetting the glyphs with pyftsubset and re-compressing with brotli cut the font payload by roughly 89%. Here are the commands, the real before and after numbers, the localization tradeoffs, and the risks.

May 15th 2026

Hardening My Repos Against the Shai Hulud npm Attack

The Shai Hulud worm hit TanStack and 170+ other npm packages by poisoning a pnpm store cache in GitHub Actions. Here is how the attack worked and the concrete steps I took to harden my own projects against it.

May 9th 2026

Patching the Claude Code VS Code Extension

The official Claude Code extension had five behaviors that added friction to my workflow. Rather than waiting, I built a companion extension that patches it in-place.

Apr 23rd 2026

My Very Fun, Super Duper Evening

What happens when you let an LLM refactor your dotfiles without checking the output closely enough. Spoiler: you boot into Recovery Mode.