The creator of #NodeJS claims "the era of humans writing code is over".
Finally! We can stop writing #JavaScript! 😜
The creator of #NodeJS claims "the era of humans writing code is over".
Finally! We can stop writing #JavaScript! 😜
🥳 Multiple major releases today
• @small-tech/auto-encrypt v5.0.0 (https://codeberg.org/small-tech/auto-encrypt#readme)
• @small-tech/auto-encrypt-localhost v10.0.0 (https://codeberg.org/small-tech/auto-encrypt-localhost/#readme)
• @small-tech/https v6.0.0 (https://codeberg.org/small-tech/https/#readme)
These releases bring short-lived certificates, IP Address (IPv4 and IPv6) support, and ACME Renewal Information (ARI) support to Auto Encrypt and @small-tech/https, implement a consistent asynchronous API across all three packages, and include loads of little fixes and code quality improvements.
This brings us very close to getting Web Numbers¹ support implemented natively in Kitten².
OCSP support is removed from Auto Encrypt and Windows support is dropped from all three packages as Microsoft is complicit in Israel’s genocide of the Palestinian people³ and Small Technology Foundation⁴ stands in solidarity with the Boycott, Divestment, and Sanctions (BDS) movement. Furthermore, Windows is an ad-infested and surveillance-ridden dumpster fire of an operating system and, alongside supporting genocide, you are putting both yourself and others at risk by using it.
Enjoy!
💕
🇵🇸 To support families facing genocide in Gaza, consider donating to them via Gaza Verified: https://gaza-verified.org/donate/
¹ https://ar.al/2025/06/25/web-numbers/
² https://kitten.small-web.org/
³ https://www.bdsmovement.net/microsoft
⁴ https://small-tech.org/
#SmallWeb #SmallTech #AutoEncrypt #AutoEncryptLocalhost #https #TLS #NodeJS #web #dev #ACME #LetsEncrypt #WebNumbers #Kitten #BDS #Palestine #Gaza #FreePalestine
The creator of #NodeJS claims "the era of humans writing code is over".
Finally! We can stop writing #JavaScript! 😜
🇵🇸 @small-tech/cross-platform-hostname module deprecated
https://www.npmjs.com/package/@small-tech/cross-platform-hostname
The release of version 1.1.0 deprecates and removes support for this small module that normalised hostname reporting between Linux/macOS and Windows.
We no longer support Windows as Microsoft is complicit in Israel’s genocide of the Palestinian people¹ and Small Technology Foundation² stands in solidarity with the Boycott, Divestment, and Sanctions (BDS) movement³.
Windows is an ad-infested and surveillance-ridden dumpster fire of an operating system and, alongside supporting genocide, you are putting both yourself and others at risk by using it.
When supporting Linux/macOS, just use the built-in os.hostname() which works the same way on both platforms.
¹ https://www.bdsmovement.net/microsoft
² https://small-tech.org/
³ https://www.bdsmovement.net/
#SmallTechnologyFoundation #crossPlatformHostname #npm #module #deprecation #BDS #Microsoft #Windows #NodeJS #web #dev #FOSS #SmallTech #SmallWeb #israel #genocide #Gaza #Palestine #FreePalestine #techIsPolitical #codeIsPolitical
🥳 @small-tech/auto-encrypt-localhost version 9.0.1 released
Automatically provisions and installs locally-trusted TLS certificates for Node.js https servers (including Polka, Express.js, etc.) As used in Kitten¹
This is a housekeeping release:
• Add TypeScript type definitions.
• Improve code quality; fix all type warnings.
• Update dependencies and remove all npm vulnerability warnings.
Enjoy! 💕
¹ https://kitten.small-web.org
#SmallTech #SmallWeb #AutoEncryptLocalhost #TLS #web #dev #NodeJS #JavaScript #SmallTechnologyFoundation
🥳 @small-tech/syswide-cas v7.0.2 released
Enables Node.js to use custom Certificate Authorities (CAs) alongside the bundled root CAs.
https://codeberg.org/small-tech/syswide-cas#readme
• Drops legacy Node support
• Is now ESM
• Improved code quality
• Added TypeScript type information
Full change log: https://codeberg.org/small-tech/syswide-cas/src/branch/main/CHANGELOG.md
Enjoy!
💕
#SmallTech #releases #syswideCAs #TLS #NodeJS #CertificateAuthorities
Caught a bug over the holidays so I’m mostly resting, feeling sorry for myself, and taking the time to at least carry out some mindless housekeeping tasks (updating dependencies, etc.) on some of my Node modules.
Released updates to the following packages yesterday:
Tape-based Node.js testing:
• Tap monkey (https://codeberg.org/small-tech/tap-monkey)
• tap-out (https://codeberg.org/small-tech/tap-out)
• esm-tape-runner (no changes; just migrated to Codeberg: https://codeberg.org/small-tech/esm-tape-runner)
Let’s Encrypt:
• Node Pebble (https://codeberg.org/small-tech/node-pebble)
Enjoy! 💕
#NodeJS #SmallTech #tape #testing #tapMonkey #tapOut #esmTapeRunner #LetsEncrypt #NodePebble #npm #modules
So I’m teaching a friend who doesn’t have any development knowledge how to get started with Small Web development and I thought it would be a good opportunity to start creating and sharing the course on the Kitten web site, one lesson at a time.
Here’s the link:
https://kitten.small-web.org/course
It’s a work in progress that I’ll be adding to along with our lessons but the draft of the first one, on setting up your development environment (which I whipped up in the pub last night, so expect typos) is here:
https://kitten.small-web.org/course/setting-up/
Please feel free to follow along and file issues if you have thoughts for improvements, etc.
The Setting Up lesson will actually likely end up being the second one with the first being a theoretical one on Small (peer-to-peer) Web development and how it is similar to and differs from Big (centralised) Web development.
Enjoy!
💕
#SmallWeb #Kitten #SmallTech #web #dev #course #education #HTML #CSS #JavaScript #NodeJS
We’re partnering with @Docker to make software development safer for everyone!
Socket Firewall Free is now bundled into Docker Hardened Images, adding build-time and dependency-install supply chain protection for #NodeJS, #Python, and #Rust
https://socket.dev/blog/socket-firewall-now-available-in-docker-hardened-images
Device Activity Tracker — WhatsApp & Signal Activity Tracker via RTT Analysis
A phone number can reveal whether a device is active, in standby or offline (and more). This PoC demonstrates how delivery receipts + RTT timing leak sensitive device-activity patterns. (WhatsApp / Signal)
📱 https://github.com/gommzystudio/device-activity-tracker
#privacy #whatsapp #signal #tracking #rtt #chat #phonetrack #chats #security #poc #typescript #nodejs #react #activity
Device Activity Tracker — WhatsApp & Signal Activity Tracker via RTT Analysis
A phone number can reveal whether a device is active, in standby or offline (and more). This PoC demonstrates how delivery receipts + RTT timing leak sensitive device-activity patterns. (WhatsApp / Signal)
📱 https://github.com/gommzystudio/device-activity-tracker
#privacy #whatsapp #signal #tracking #rtt #chat #phonetrack #chats #security #poc #typescript #nodejs #react #activity
The first part of chapter 1 of "So You Want To Build a Workflow Engine" is done!
Learn about how I built multiplayer code editing with server persistence in a couple of hours with #nodejs, #vue, #loro and monaco here:
https://docs.sywtb-workflow-engine.rash.codes/chapter-1/0-order-of-operations.html
Next up is executing user code safely in a wasm sandbox, stay tuned!

The first part of chapter 1 of "So You Want To Build a Workflow Engine" is done!
Learn about how I built multiplayer code editing with server persistence in a couple of hours with #nodejs, #vue, #loro and monaco here:
https://docs.sywtb-workflow-engine.rash.codes/chapter-1/0-order-of-operations.html
Next up is executing user code safely in a wasm sandbox, stay tuned!

We’re partnering with @Docker to make software development safer for everyone!
Socket Firewall Free is now bundled into Docker Hardened Images, adding build-time and dependency-install supply chain protection for #NodeJS, #Python, and #Rust
https://socket.dev/blog/socket-firewall-now-available-in-docker-hardened-images
Just updated Node Pebble to support latest release version of Let’s Encrypt’s Pebble testing server.
https://codeberg.org/small-tech/node-pebble
Enjoy!
💕
#LetsEncrypt #Pebble #testing #tls #ssl #security #NodeJS #JavaScript
I updated the initial Kitten course based on our first lesson with @casey and your feedback here. So now we start with no tooling except for your default terminal app and Kitten and it serves as a gentle introduction to the command line and gets to you seeing your first web page in your web browser far more quickly.
https://kitten.small-web.org/course/hello-kitten
The tooling chapter is now Chapter 2:
https://kitten.small-web.org/course/tools-of-the-trade
And there’s a new Chapter 3 that gets you editing your newly-created web page using Helix Editor:
https://kitten.small-web.org/course/hello-kitten-revisited
I’m going to add an introduction to git to this chapter soon.
The course is being developed as Casey and I have our lessons so new chapters should trickle in and things may change with rewrites, etc., as we go.
https://kitten.small-web.org/course
Please feel free to follow along and pipe in with thoughts and suggestions if you have any.
Enjoy!
💕
PS. There will be screenshots, etc., added as I work on it more. I know it’s a bit text-heavy at the moment.
#Kitten #KittenCourse #course #SmallWeb #PeerToPeerWeb #web #dev #HTML #CSS #JavaScript #NodeJS
🥳 New Kitten Release
• Reduces minimum Bash version requirement for installing Kitten to Bash 3.2+ (was previously Bash 5+). This removes the requirement for people on macOS to upgrade the ancient version of Bash that Apple ships with their desktop operating system. (If you’re on Linux none of this was ever an issue for you.)¹
• Updates runtime to Node 24.12.0, the latest long-term support (LTS) version.
¹ While it’s easy enough to update your version of Bash on macOS using Homebrew, that only works (as we discovered on Friday https://mastodon.ar.al/@aral/115706233541301655) if you’re running one of the latest three versions of macOS and thus excludes people with perfectly functional older computers. (Don’t get me started on why Apple ships an ancient version of Bash as we’ll go down the rabbit hole of open as in “open for business” vs “free as in freedom” and corporate capture and how capitalism will happily be the end of us if we let it. Aren’t you glad you didn’t get me started?) ;)