tkmadeit retweeted
Got some performance improvements in. Try it live: rive-vehicle-interface-i8bka…
Made with @rive_app
I've been a little sad the last couple of days. Mediabunny's first, longest and most loyal sponsor, Gling, stopped their gold sponsorship of Mediabunny this week. Their CTO @yonatanbd left the company, and they're now restructuring their efforts and cutting costs where they can. An understandable move from their part, and it's got nothing to do with me.
I'm deeply grateful for the years of Yonatan's support; he alone was the basically the reason Mediabunny even got started and he supported me through its development for half a year before I released the version to the public. Thanks to his encouragement and financial support (as well as the support of @konstipaulus), I had the courage the quit my job back then and to focus on building cool media stuff for the web full time!
On the financial side, I'd be lying if I said losing a gold sponsor doesn't hurt. It does, a little. I'm still alright though! GitHub Sponsorships are my main way of making a living at the moment. If you or your company have gotten considerable value from Mediabunny, consider a donation! I'm sure your logo would look beautiful on the Mediabunny home page ;)
I'm working on super cool upcoming stuff that I haven't shared yet, and I'd love to keep working on it. People still haven't experienced the true power of web-based media processing!
tkmadeit retweeted
Ever watched your coding agent confidently write massive amounts of JavaScript for a simple swipe gesture, only for the animation to stutter? 😅
Watch our side-by-side test: with Modern Web Guidance enabled, the coding agent pulls expert-vetted swipe-to-remove guide into its context window, handling features like scroll snap and intersection observer with ease → goo.gle/mwg
tkmadeit retweeted
Another view of this, built with the @rive_app CLI.
Rive now has a text-based format, so agents can write Rive files directly. That makes Rive the best format for agents to build interactive experiences that run on web, mobile, consoles and vehicle hardware natively.
tkmadeit retweeted
Tip for people building interactive iframes on a canvas: don’t let the iframe intercept gestures. Capture them at the canvas level and forward synthetic events to the iframe. This keeps the HTML interactive without interrupting panning at iframe boundaries.
one of the reasons OpenCode 2.0 took so long was we redesigned it for hotreloading
if you ask it to make a skill for itself (or make one manually) it'll get picked up immediately in a way that does not bust cache
targeting public beta end of week, wish us luck!
tkmadeit retweeted
Paper Shaders: now fully open source and FREE
Yes, you can make a: plugin, tool, template, site, app, library. Resell it. Make a Figma plugin. It's already code. Go for it!
We're pushing shaders forward. New Paper Shaders on the way.
Introducing TurboRes, an extremely fast ProRes video decoder for the web! 🚀
Written from scratch in Zig and compiled to WebAssembly, TurboRes has been relentlessly optimized for performance and is around 2-3x faster than native FFmpeg.
It opens up the door for professional video workflows being done entirely end-to-end in the browser, without any hardware accelerators needed!
tkmadeit retweeted
You can now join the waitlist to try Awenate (aw·nayt).
It's a new way to design and interact with your product in real time. Still in private beta, but invites will go out slowly as I develop. (And yes, the landing page was designed inside Awenate.)
awenate.com/
tkmadeit retweeted
Today i learned zsh can invoke a function for nonsense commands, so if you put this in your .zshrc you can just type prompts straight into your terminal
𝕔𝕠𝕞𝕞𝕒𝕟𝕕_𝕟𝕠𝕥_𝕗𝕠𝕦𝕟𝕕_𝕙𝕒𝕟𝕕𝕝𝕖𝕣() {
𝕔𝕠𝕕𝕖𝕩 "$*"
𝕣𝕖𝕥𝕦𝕣𝕟 $?
}
This is not a very good idea
tkmadeit retweeted
I made a ton of improvements to drag and drop to reorder elements so now its buttery smooth.
tkmadeit retweeted
A thread of @figma agent prompt examples / screen recordings I helped bring to life to get you started on automations (with 🎵 made on my OP-XY): 🧵
1.) Explore design directions
Prompt: Give me 3 style options for this design, one that's organic, one modern, and one retro.
tkmadeit retweeted
🥅
/goal has graduated from an experiment—for tasks big and small, Codex gets your work done.
Use goal mode in the Codex app, IDE Extension, or CLI to give Codex a specific milestone, and it will keep working until it gets there, even across hours or days.
You can check in and steer, and even pause Codex along the way.
Pro tip: start side chats to understand the work that has been done so far without having to interrupt the main task.
developers.openai.com/codex/…
Mediabunny v1.45.0 now works basically everywhere 🚀
With the new @mediabunny/server extension, you get access to super-fast, hardware-accelerated media decoding and encoding on the server. Inspect, process and transform media on the server without ever leaving TypeScript.
The upcoming @mediabunny/server is able to transcode 1080p videos at around ~9.5x real-time speed on my machine (M4).
The best thing: the majority of the work is done in other threads, meaning the main thread basically sits close to idle at all times!
tkmadeit retweeted
SECURITY ADVISORY — TanStack npm packages
A supply-chain compromise affecting 42 @tanstack/* packages (84 versions total) was published to npm earlier today at approximately 19:20 and 19:26 UTC. Two malicious versions per package.
Status: ACTIVE — packages are deprecated, npm security engaged, publish path being shut down.
Severity: HIGH — payload exfiltrates AWS, GCP, Kubernetes, and Vault credentials, GitHub tokens, .npmrc contents, and SSH keys.
If you installed any @tanstack/* package between 19:20 and 19:30 UTC today, treat the host as potentially compromised:
• Rotate cloud, GitHub, and SSH credentials immediately
• Audit cloud audit logs for the last several hours
• Pin to a prior known-good version and reinstall from a clean lockfile
Detection — the malicious manifest contains:
"optionalDependencies": {
"@tanstack/setup": "github:tanstack/router#79ac49ee..."
}
Any version with this entry is compromised. The payload is delivered via a git-resolved optionalDependency whose prepare script runs router_init.js (~2.3 MB, smuggled into each tarball at the package root).
Unpublish is blocked by npm policy for most affected packages due to existing third-party dependents. All 84 versions are being deprecated with a SECURITY warning, and npm security has been engaged to pull tarballs at the registry level.
Full technical breakdown, complete package and version list, and rolling status updates:
github.com/TanStack/router/i…
Credit to the security researcher for responsible disclosure.


















