Skip to content

Instantly share code, notes, and snippets.

View MaddyGuthridge's full-sized avatar
🏳️‍⚧️
Trans rights

Maddy Guthridge MaddyGuthridge

🏳️‍⚧️
Trans rights
View GitHub Profile
@mcollina
mcollina / guide.md
Created April 30, 2026 09:41
Configuring minimum release age across npm, pnpm, and yarn

Configuring minimum release age across npm, pnpm, and yarn

Setting a minimum release age (a "cooldown") on dependencies is a cheap, high-leverage defense against supply-chain attacks. Most malicious package versions are detected and yanked within hours, so a 24-hour delay filters out the smash-and-grab incidents (axios 1.14.1, ua-parser-js, Solana web3.js, etc.).

All three major Node.js package managers now support this, but each one used a different name and a different unit. Here is what you need.

Minimum versions

Tool Setting Unit Introduced in
@rpavlik
rpavlik / settings.json
Last active July 10, 2026 04:17
Go away copilot and other slop machines (in vscode)
{
// go away copilot and other ai slop machines
"accessibility.verboseChatProgressUpdates": false,
"accessibility.verbosity.inlineChat": false,
"accessibility.verbosity.panelChat": false,
"accessibility.verbosity.terminalChatOutput": false,
"ansible.lightspeed.suggestions.waitWindow": 360000,
"chat.agent.codeBlockProgress": false,
"chat.agent.enabled": false,
"chat.agent.maxRequests": 0,
@luckygoswami
luckygoswami / migrate-gpg-key.md
Created May 5, 2025 17:59
Step-by-step guide to transfer your existing GPG key to a new machine for Git commit signing. Covers key export/import, Git configuration, and GitHub setup for seamless migration.

Title: 🔑 How to Import and Configure an Existing GPG Key on a New System

Description:

Step-by-step guide to transfer and set up an old GPG key (for Git commit signing) on a new machine.


1. Export Keys from Old System

@sindresorhus
sindresorhus / esm-package.md
Last active July 24, 2026 09:19
Pure ESM package

Pure ESM package

The package that linked you here is now pure ESM. It cannot be require()'d from CommonJS.

This means you have the following choices:

  1. Use ESM yourself. (preferred)
    Use import foo from 'foo' instead of const foo = require('foo') to import the package. You also need to put "type": "module" in your package.json and more. Follow the below guide.
  2. If the package is used in an async context, you could use await import(…) from CommonJS instead of require(…).
  3. Stay on the existing version of the package until you can move to ESM.
@andris9
andris9 / git-cache-meta.sh
Created March 5, 2012 13:15
git-cache-meta
#!/bin/sh -e
#git-cache-meta -- simple file meta data caching and applying.
#Simpler than etckeeper, metastore, setgitperms, etc.
#from http://www.kerneltrap.org/mailarchive/git/2009/1/9/4654694
#modified by n1k
# - save all files metadata not only from other users
# - save numeric uid and gid
# 2012-03-05 - added filetime, andris9