Shai Hulud npm Attack: How It Worked and How I Hardened My Repos
The Shai Hulud worm poisoned a pnpm cache in GitHub Actions to hit TanStack and 170+ npm packages. How it worked and the steps I took to harden my repos.
Patching the Claude Code VS Code Extension
Five defaults in the Claude Code VS Code extension I changed with a companion extension that patches its files and re-applies after every update.
AppKit vs SwiftUI on macOS: Layout, Performance, and Trade-offs
A comparison of AppKit and SwiftUI as macOS UI frameworks, covering layout, rendering, and performance at scale, plus where UIKit and Mac Catalyst fit in.
A tale of caution using LLMs to refactor dot files
An LLM refactor of my dotfiles sourced my workspace files, so every new shell launched more shells. I fixed it from macOS Recovery Mode with diskutil.
Automating macOS Setup with Bootstrap and Teardown Scripts
How I replaced an afternoon of new-Mac setup with bootstrap.sh, and why the teardown script has to be written at the same time.
Faster Zsh Startup: compinit, NVM, and Claude Code PATH
My zsh prompt took a second to appear, with compinit running three times. Profiling with zprof, fixing NVM, and stopping Claude Code losing Node.