#dev 2025-12-08

2025-12-08 UTC
[artlung]1 joined the channel
#
[morgan]
It looks like ive found a use case for a web component that's purely in the light DOM i.e no shadow root
[artlung] joined the channel
#
Loqi
Ok, I'll tell them that when I see them next
AnaOlivia, dusted_, gRegor, grufwub, bterry1, srijan, barnaby, rgbivvv-, [aciccarello], doesnm_, DanQ, claudinec, rolandas, beleth and shoesNsocks joined the channel
#
[KevinMarks]
OK, bookmarklets I have that I use frequently (I have some leftover ones that no longer work).
#
[KevinMarks]
share openly:
#
[morgan]
This is perfect
#
[morgan]
Im really inspired by yours and Aciccarello's collections
rolandas joined the channel
#
[KevinMarks]
hide sticky elements (useful for when a page has a sticky floating header menu but you want page down to not lose that bit of vertical height each time)
#
[KevinMarks]
```javascript:(function()%7B(function%20()%20%7Bvar%20i%2C%20elements%20%3D%20document.querySelectorAll('body%20*')%3Bfor%20(i%20%3D%200%3B%20i%20%3C%20elements.length%3B%20i%2B%2B)%20%7Bif%20(getComputedStyle(elements%5Bi%5D).position%20%3D%3D%3D%20'fixed')%20%7Belements%5Bi%5D.parentNode.removeChild(elements%5Bi%5D)%3B%7D%7D%7D)()%7D)()```
#
[KevinMarks]
instant text editor (slightly mad this one)
#
[KevinMarks]
`data:text/html,<html contenteditable >`
#
[morgan]
Basically right now Im working on like 5 aspects:
#
[morgan]
a) A re-usable native-as-possible accessible-as-possible `dialog` element template, so that I can reuse it for multiple bookmarklets
#
[morgan]
b) A specific implementation of a success criteria for a guideline at the w3c
#
[KevinMarks]
Analyse text contrast:
#
[morgan]
c) A workflow plan for creating and versioning the bookmarklets somehow, but less concerned about this
#
[KevinMarks]
add a popup to switch out the CSS template for the current page with some common ones:
#
[KevinMarks]
```javascript:(function()%7Bvar body %3D document.getElementsByTagName('body')%5B0%5D%3Bscript %3D document.createElement('script')%3Bscript.type%3D 'text%2Fjavascript'%3Bscript.src%3D 'https%3A%2F%2Fdohliam.github.io%2Fdropin-minimal-css%2Fswitcher.js'%3Bbody.appendChild(script)%7D)()```
#
[KevinMarks]
send the current page to huffduffer to add an audio file to your custom podcast:
#
[KevinMarks]
```javascript:(function()%7Bvar body %3D document.getElementsByTagName('body')%5B0%5D%3Bscript %3D document.createElement('script')%3Bscript.type%3D 'text%2Fjavascript'%3Bscript.src%3D 'https%3A%2F%2Fdohliam.github.io%2Fdropin-minimal-css%2Fswitcher.js'%3Bbody.appendChild(script)%7D)()```
#
[KevinMarks]
oops, wrong paste
thegreekgeek joined the channel
jeremy and ribose joined the channel
#
ribose
my introduction to bookmarklets was https://adamledoux.net/bookmarklets/
#
ribose
I haven't written any myself yet, but I keep track of the ones I use regulary at https://notes.ribo.zone/www/bookmarklets (I really like the archive.org, sticky element, and text editor ones shared above, so they'll be added to the list soon!)
#
snowlesstaco
Hey, I have a question for you guys. When I logged into Odin Project yesterday, I saw this: "We advise you to not install npm packages right now, because npm is experiencing a security issue." with a link to an article that details what one should do about this. The article: https://www.aikido.dev/blog/shai-hulud-strikes-again-hitting-zapier-ensdomains
#
snowlesstaco
So I read the words, but I think I'm too much of a beginner to really understand. In my project, I use a framework called "Astro" and it requires a download of Node.js. Is that what's considered "npm"? I do use npm in the command line for astro-related stuff.
#
snowlesstaco
This is a little over my head, so if anyone might have guidance, please let me know!
#
IWDiscord
<s​nowlesstaco>
#
IWDiscord
<s​nowlesstaco>
user47384 joined the channel
#
[tantek]
yeah pretty much if you think you're a beginner at node, best to avoid anything node right now
DanQ, rolandas, [Mike_Mai], gRegor, bret, AnaOlivia and balintm joined the channel
#
snowlesstaco
!! So what should I do? Delete my whole project? Uninstall Node and put my project on hiatus? Remove the repo from Github?
#
[tantek]
I think the short answer is anything you don't feel comfortable digging into the security implications thereof you should uninstall from your personal machine(s). repos on GitHub are a different issue since that's a question of exposing potential hazards to others
bloot34 and barnaby joined the channel
#
[aciccarello]
For context, the npm security issue is that some NPM packages were exploited and install malicious code. What made it particularly bad is that some of the malicious code exploited CI systems to publish more infected packages.
#
[aciccarello]
NPM revoked their old security tokens and has pulled the known bad packages so it should be mostly mitigated. But there have been a couple rounds of these attacks so I don't think it's completely solved.
CrimeWave and DanQ joined the channel