Writing··9 min read
What I Learned Auditing 10,000 npm Packages
Supply chain risks, phantom dependencies, and why install scripts remain JavaScript's largest security blind spot.
#Security#Node.js#Open Source
Beta·Independent Project
Vellum Reader
“Distraction-free technical document reading environment with local-first annotation.”
OVERVIEW
A distraction-free web document reader engineered specifically for dense RFCs, architectural specs, and computer science papers. Features instant offline caching, serif typography tailored for sustained reading, and margin notes.
HOW IT WORKS
Parses Markdown, CommonMark, and PDF specs into a clean DOM tree with semantic heading hierarchy and automatic footnote anchoring.
ARCHITECTURE
Pure client-side WebAssembly parser with local-first persistence in IndexedDB. Zero analytics, zero cloud syncing, 100% private.
TECHNOLOGIES
Next.jsWebAssemblyIndexedDBTailwind CSS
CONNECTED KNOWLEDGE
Related Journal Entries
Experiments··7 min read
Can AI Rebuild a Website From a Screenshot?
Testing multimodal models on complex editorial typography, asymmetric grids, and responsive layouts.
#AI#Design#CSS
Documentation··6 min read
SlopFree Architecture & CLI Reference
Complete technical reference, installation guide, AST heuristics, and CI/CD integration.
#Documentation#SlopFree#CLI