Life & fun · February 25, 2023
Deon.land – Deno.land?
After yesterday's release of Deno with package.json support[0] some discussions about how Deno handles dependencies have been coming up again. Since Deno's inception, I've mostly been watching it from the sidelines, dabbling a bit with it, and mostly been considering it a fad that will die out sooner or later. Ultimately, with the new package.json support nothing really changed regarding the dependency management story of Deno. It's still as awful as ever. Prompted by some discussions, I decided I would try to test how easy it would be to mount a typo-domain supply chain attack. And as…
Deon.land – Deno.land? launched on February 25, 2023 with 32 votes, #1,254 of 3,829 launches that month and more than 75% of that year's launches.
In plain words
Deon.land is a demonstration of a typo-domain supply chain attack vulnerability in Deno. The project shows how easily an attacker can register a misspelled domain and use a Cloudflare Worker to intercept and manipulate code imports in Deno projects. It highlights security concerns with Deno's dependency management system, particularly how developers copying and pasting import statements could accidentally use compromised URLs. The project is designed to illustrate existing vulnerabilities rather than provide a tool for malicious use.
written from the facts on this page · September 2026
From the sources
In the maker’s words, at launch
After yesterday's release of Deno with package.json support[0] some discussions about how Deno handles dependencies have been coming up again. Since Deno's inception, I've mostly been watching it from the sidelines, dabbling a bit with it, and mostly been considering it a fad that will die out sooner or later.…
Does a similar job
all alternatives →
Extend your platform via custom code with Deno Subhosting2023 · deno.com · ▲37Hey all, Andy from the Deno team here. We're excited to share with you Deno Subhosting, an easy way to extend your platforms functionality by securely running untrusted JavaScript written by your users. When we first launched Deno Deploy in 2021, we were surprised at the volume of requests from companies about getting access to the APIs needed to run Deno Deploy. Many companies wanted to give their users the ability to write custom logic in their app, but setting this up in the cloud presents security concerns and a ton of infra work/maintenance. We realized that there was an…
A WebAssembly System Interface Implementation for Deno2020 · github.com · ▲90A (WIP) WebAssembly System Interface implementation for Deno - caspervonb/deno-wasi
- TVTrex v1.1.1 – package manager for deno2020 · ▲5
there's a lot a changes in deno and this tool now implements the way to kill a process when this end to avoid the leak resources fail also the new way to get a module in the std library in nest.land is supported https://github.com/crewdevio/Trex/
A tool to Convert JSON schemas into TypeScript Deno classes2023 · github.com · ▲43Hello all To preface this is just something I've been making as a learning exercise, so all feedback is appreciated. This is a tool that converts JSON schemas into TypeScript utility classes for use in Deno. Automatic Type Generation: Typescript interfaces for the compressed and uncompressed versions of your data. Compression & Decompression: Compress and decompress your data. Validation: Built-in data validation using Ajv ensures your data adheres to the schema. Reusability: Once generated, the utility classes can be used in other Deno projects. It currently only supports a subset of JSON…
Stampede – REST Framework for Deno2020 · github.com · ▲31🦕 Deno REST framework/eco-system. Contribute to bashovski/stampede development by creating an account on GitHub.
More life & fun this month
the category →
A free city-building game in your browser. You are the mayor. You know what the city needs. Now get it past the zoning board, the neighbors, the appeals court and the next election.
Life & fun · 1d ago · permit.petercai.com
- IV
Life & fun · 14d ago · tanzaniaeducationproject.org
Turn a phone, tablet or TV into a sign. Type a message and it fills the screen: welcome signs, timers, Wi-Fi passwords and more. No app, no account, free.
Life & fun · 15d ago · bigwords.page
Play a free virtual guitar online with your keyboard or by touch. Slow songs down and see every chord, string and strum. Acoustic, classic, electric and bass.
Life & fun · 8d ago · guitoro.com
Carrier settings from iPhone, Pixel and Galaxy firmware, decoded and compared: APNs, VoLTE, 5G and Wi-Fi Calling per carrier, and what each build changed.
Life & fun · 12d ago · carrierexplode.com
Life & fun · 22d ago · space.bl2.net
Source: Show HN post ↗ · launch text quoted in part
