litomore.me

LitoMore's Mind

Recently I've started to find some AI-generated PRs a waste of my time. The contributor might spend five minutes generating a patch, but I need an hour to review it and figure out whether it actually solves the problem. This is especially frustrating with good first issue, a label that is supposed to make it easier for newcomers to start contributing to a project. Automated scripts can also find issues through labels such as help wanted or even bug, so the same problem can show up under those labels too.

Recently our project upgraded to pnpm 11. While maintaining the project dependencies, I took a look at how pnpm audit --fix fixes vulnerabilities. pnpm audit itself is easy to understand: it checks whether dependencies in the lockfile match known vulnerabilities. But once --fix enters the picture, things become a little more subtle.

My 8th year on GitHub has come to the end, and my 9th year with GitHub is begin. I manually counted last year's activities and assigned several awards to them. Let's take a look!

Nowadays, operating systems have the light-on-dark color scheme feature, and websites also have their own dark mode settings. They provide three options of Light, Dark and Sytem for users to choose from. So what are the potential problems?

You might have heard of the new scam about the CAPTCHA which asks you to use Windows + R to verify that you are human. It gives you a popup and introduces a verification step with Windows + R and Ctrl + V then press Enter. You probably already know how it works, but let's take a closer look at their code this time.