Christ follower, software dev @wilbergroup using @laravelphp. Co-host of @northsouthaudio and @laravelnews with @michaeldyrynda
Joined June 2008
- Tweets 16,565
- Following 613
- Followers 5,931
- Likes 23,246
1,205 Photos and videos
Jake Bennett retweeted
May 11
This is crazy. The hacker installed a dead-man's switch that will wipe your computer if you revoke the GitHub token they stole from you. Revoking the token is what triggers the wipe.
May 11
SECURITY ADVISORY — TanStack npm packages
A supply-chain compromise affecting 42 @tanstack/* packages (84 versions total) was published to npm earlier today at approximately 19:20 and 19:26 UTC. Two malicious versions per package.
Status: ACTIVE — packages are deprecated, npm security engaged, publish path being shut down.
Severity: HIGH — payload exfiltrates AWS, GCP, Kubernetes, and Vault credentials, GitHub tokens, .npmrc contents, and SSH keys.
If you installed any @tanstack/* package between 19:20 and 19:30 UTC today, treat the host as potentially compromised:
• Rotate cloud, GitHub, and SSH credentials immediately
• Audit cloud audit logs for the last several hours
• Pin to a prior known-good version and reinstall from a clean lockfile
Detection — the malicious manifest contains:
"optionalDependencies": {
"@tanstack/setup": "github:tanstack/router#79ac49ee..."
}
Any version with this entry is compromised. The payload is delivered via a git-resolved optionalDependency whose prepare script runs router_init.js (~2.3 MB, smuggled into each tarball at the package root).
Unpublish is blocked by npm policy for most affected packages due to existing third-party dependents. All 84 versions are being deprecated with a SECURITY warning, and npm security has been engaged to pull tarballs at the registry level.
Full technical breakdown, complete package and version list, and rolling status updates:
github.com/TanStack/router/i…
Credit to the security researcher for responsible disclosure.
145
993
9,501
1,719,592
Jake Bennett retweeted
May 7
Passkeys are now NATIVELY supported in Laravel 🤩
This is why I love Laravel SO MUCH 💯
12
36
375
17,161
Jake Bennett retweeted
My colleague Nick wrote a good post on using AI for reading code, not generating it.
Instead of pointing AI at the “generate more code” problem, he used it to understand what was already there: map the codebase, describe the data model, trace dependencies, and surface hidden assumptions.
That feels like a very practical use of these tools.
ALT A diagram illustrating a codebase map, detailing domains like Identity, Billing, and Orders, and their connections to data infrastructure components.
5
13
136
11,398
Jake Bennett retweeted
Apr 27
When I started @artisan_weekly I genuinely wasn't sure how long I'd keep it going. Curating a newsletter every single Friday is a commitment.
81 editions in and it's still one of the things I look forward to most each week.
Not because of the writing or the design or the publishing - but because of the sheer breadth of people I get to read.
I sat down and counted properly today: 265 different authors featured across those 81 editions.
That number genuinely surprised me.
Some you'd expect to see week in week out - @mattstauffer, @enunomaduro , @ericlbarnes , @PovilasKorop . But the bit I actually love is finding someone two editions in who isn't on anyones radar yet, sticking their post in and watching it go out to readers.
A few of the contributors who deserve a proper mention:
@harrisrafto (artisanweekly.com/authors/ha…) has been in 30 editions. Thirty. The man is a writing machine and consistently brilliant.
@AshAllenDesign (artisanweekly.com/authors/as…)
has 20 editions to his name, with tutorials that are pitched at exactly the right level.
@joshcirre (artisanweekly.com/authors/jo…) has 17 editions. If you've not seen his videos with the Laravel team you're missing something.
@ollieread
(artisanweekly.com/authors/ol…) has 9 editions to his name and the quality of his writing speaks for itself
The @Laravel community has more good writers than people realise. Artisan Weekly is just my attempt at making sure you find them.
artisanweekly.com/newsletter if you want to subscribe. It lands every Friday morning.
Who's writing Laravel content I should know about? Always looking for fresh names.
2
9
18
2,043
Jake Bennett retweeted
Apr 24
We were joined by @davidhemphill on the latest episode of @northsouthaudio as we discussed agentic workflows and his new tool, Gent; the desktop control room for coding agents.
share.transistor.fm/s/320d0c…
2
3
2,437
Jake Bennett retweeted
Apr 23
🚀 Here's another new package: Laravel Mobile Pass. 🎫
It can generate Apple Wallet and Google Wallet passes from your Laravel app. Boarding passes, tickets, coupons, store cards, loyalty cards, all through a fluent builder.
ALT Boarding pass for Artisan Airways flight ART103 from Abu Dhabi to London Heathrow, showing passenger details, seat, and boarding time.
32
67
860
38,604
Jake Bennett retweeted
Apr 16
Artisans everywhere, for those with eyes to see
9
8
449
19,658
Jake Bennett retweeted
Apr 15
🚀 We released a new thing: `spatie/guidelines-skills`.
It turns our internal coding guidelines into AI skills, so coding assistants can follow the same conventions we use at Spatie.
That means more useful AI-generated code, with less cleanup afterwards.
6
13
191
12,294
Jake Bennett retweeted
Apr 15
Cynicism comes at a cost -- and the cost lands exclusively on the cynic.
9
6
87
10,236
Jake Bennett retweeted
Apr 16
Not every great talk needs to be deeply technical.
This is what we're actually looking for at @LaraconAU 👇
1
2
5
1,006
Jake Bennett retweeted
Apr 10
You can now `tinker` on your Cloud environments. 🔨
Apr 10
We just released Cloud CLI v0.2.0, which introduces... 🥁
𝚌𝚕𝚘𝚞𝚍 𝚝𝚒𝚗𝚔𝚎𝚛
You can now tinker in your Laravel Cloud environment right from your terminal.
Bonus: If you want to tinker from your IDE, just use the --𝚎𝚍𝚒𝚝𝚘𝚛 flag.
Happy tinkering 🧪
4
8
165
17,177
Jake Bennett retweeted
Apr 10
This came up on @northsouthaudio this week, and it’s something I see every year with CFPs:
we assume the audience knows way more than they actually do.👇
1
2
5
896
🔥 Hot tip
Apr 8
Parenting hack: get an unlimited car wash membership. Need him to put shoes on? Car wash. Need him to eat dinner? Car wash. Need him to do literally anything? Car wash.
2
458
Jake Bennett retweeted
The Kings of College Basketball 〽️
881
9,754
26,743
1,307,261
I'm happy to share that AlpineFlow & WireFlow have been alpha released! It's been quite the journey getting these two packages built and I hope you all enjoy it as much as I have building it. This is just the beginning. @laravelphp @LaravelLivewire @Alpine_JS
12
15
118
9,736
Jake Bennett retweeted
Apr 1
Last Laracon, we took 150 engineers golfing.
It was a mistake.
16
22
316
39,150
Jake Bennett retweeted
Apr 2
.@mattstauffer joins the PHP Foundation board and shares what it means for the future of PHP and Laravel.
We talk about the Foundation’s role, its structure, and why this could be the start of stronger collaboration across the entire PHP ecosystem.
Watch the full interview: youtube.com/watch?v=TgWN8Ujl…
2
24
3,746
Jake Bennett retweeted
Mar 28
My dear front-end developers (and anyone who’s interested in the future of interfaces):
I have crawled through depths of hell to bring you, for the foreseeable years, one of the more important foundational pieces of UI engineering (if not in implementation then certainly at least in concept):
Fast, accurate and comprehensive userland text measurement algorithm in pure TypeScript, usable for laying out entire web pages without CSS, bypassing DOM measurements and reflow
1,335
8,197
64,980
24,004,287
Jake Bennett retweeted
Mar 27
🔥
7
3
92
7,117