The November release drops Node 16, which reached end of life in September, and the upgrade was mostly about the runtime rather than the tool. A major version…
A build script written in JavaScript because it processes the asset manifest, in a repository where everything else is PHP. The Makefile is the interface and the language…
Two developers on different package manager versions produce lock file churn that looks like a real diff and is not. One line in package.json removes an entire category…
Adding permissive CORS headers so a dev server on 5173 can reach an API on 8080 means the development configuration differs from production in a security-relevant way. The…
Most PHP repositories contain JavaScript for the build, and the moment one of those scripts touches production it stops being tooling. The build script is fine unowned because…