It's interesting that so many articles about "how to prevent bugs" end up basically restating, "make illegal states unrepresentable".

Yet, so many languages still lack union types..

I want to argue that Lodash, which hasn’t been updated in 4 years, should nonetheless be considered safe from a security standpoint.

1. It has *zero* external dependencies
2. It has no side effects
3. It’s a dumb as possible

We should all strive for this level of perpetuity.

David Longstreth will be livestreaming a conversation on Substack with the great artist Phil Elverum (mount eerie) about songs, words, art, life and eye contact on monday april 7th. 3pm ET / 12p PT. tune in todirtyprojectors.substack.com or pwelverumandsun.substack.com

Technical debt isn't debt, it's more like inflation. It drives down the "buying power" of your dev time.

This quote from a story I worked on back in 2018, after the last round of hugely destructive wildfires, has been ringing in my ears.

https://web.archive.org/web/20190318002822/https://www.latimes.com/projects/la-me-california-buildings-in-fire-zones/

Gonna tell my kids this was Nosferatu.