Vite

If you're not familiar with AntFu, they're very prolific in the open source space.

They work on Vite and Vue, and they also created SlideDev.

And on top of that, lots of dev tools for all of those things.

This isn't a problem everyone's going to have because not everyone's building dev tools, but AntFu has built a lot of dev tools and has taken everything he's learned and put it into a framework.

So it's called DevFrame.

And the idea is you define your tool in a somewhat agnostic way, and then you have handlers for different frameworks.

So the same dev tool could run in Nitro or Hono or Next.js or SvelteKit or Vite or RSBuild.

So this is going to be huge for library and framework creators that want to maybe add more telemetry or more info about what's happening inside of your app when you add them to your app.

nice okay Two more items here.

Raymond Malcolm 10 contributed a dev server URL method to the Vite class, which I did not know this was a thing.

You have a Vite class inside of Laravel? Didn't know that.

But that dev server URL will allow you to retrieve the URL of the Vite development server.

This could be used for something like generating asset URLs in your application, etc.

Pretty cool new contribution there.

If you're understanding, Fresh helps Laravel developers streamline package development with robust support for testing CI and AI integration.

It provides you with an opinionated skeleton with testing CI and Workbench available, as well as integration with Laravel Boost.

So I've been kind of preparing for that.

TypeScript? Are you using TypeScript? It's TypeScript, Vite, and a little bit of Node.

Okay.

Yeah.

You're not to the point where you can build a product that you should take to market with AI, period, exclamation point, period, exclamation point.

Now, depending on your builder, you can kind of get better there using SSG generators for your, let's say you're using Vite.

And thanks for those who correct me that it's not Vite, because I always used to say Vite.

But Vite, Vite as a plugin SSG, Vike as a formally Vite plugin SSR gained its own identity as it started to be able to be a interoperable generator for Vue.

Vue is absolutely amazing.

The architect behind it is like a solopreneur dude, but it beats the pants off of React and Angular in so many ways.

And if you've been following along the podcast, you know, we've talked about some of the stuff that's new with Oxy and things like that.

But one thing I wanted to highlight, which I don't know if we talked too much about, but the React compiler is stable and is now part of Vite 8.

So if you are using V8, you get access to the React compiler.

I do think that we talked about the React compiler being available in Next.js, but it's also part of just V8 projects if you're using that.

If a wallet contains zero stake, there is no reason to request an approval transaction for a staking amount the user cannot actually provide.

Front-end architecture The front-end is built with React, Vite, Ethers, JS, Wagmai.

It provides wallet connection and exposes the most important protocol state.

Users can see alongside their own.

HackingCat disputes parts of the report, saying some tools are theirs, but the lockers definitely are not.

[digital swish] Vite servers spill cloud secrets.

A mass scanning campaign is targeting internet-exposed Vite development servers to steal cloud credentials and configuration files.

The attackers are exploiting a high-severity file read bypass affecting multiple Vite versions.

F5 observed more than 800 attacks and roughly 32,000 raw events in one month.

The scans looked for environment files, AWS credentials and backups, Azure access tokens, Terraform state, serverless configuration, and Linux password files.

F5 recommends updating Vite, blocking public access to Port 5173 and suspicious/@fs/ requests, and rotating every secret that may have been reachable from an exposed, unpatched server.

[digital swish] Twitch extension goes token phishing.

... we saw this with Bun.

We saw this with Astro, so many others, that they make the Vite people, right? The sa- same sort, same story there, that-

Yep

...

they m- make some attempt at profitability because they took in venture capital money, in the case of a lot of these projects, especially Vite, and they try to put together some sort of service to make money, that service struggles, and then eventually some big player [laughs] in the industry swoops them up-

Buys them

... and a- and then acquires them and buys them.