
Dependency review allows you to easily understand your dependencies before you introduce them to your environment. As part of a pull request, you can see what dependencies you’re introducing, changing, or removing, and information about their vulnerabilities, age, usage, and license.
WB
William Bartholomew·December 17, 2020Security 
Git has a reputation for being confusing. Users stumble over terminology and phrasing that misguides their expectations. This is most apparent in commands that “rewrite history” such as git cherry-pick or git rebase. In my experience,…

The developer community remains the heart of GitHub, and we’re committed to respecting the privacy of developers using our product.

Together with mobile network operators Airtel and Vodafone, and technology partners ADI, Altiostar, Baicells, Flex, Mavenir, MTI, Parallel Wireless, and Xilinx, we are focused on building general-purpose radio access network (RAN) reference designs for 4G and 5G networks in the Open RAN ecosystem. This work is being done as part of the Evenstar program. The […]

One of the biggest questions faced by the recommendation systems community is whether recommendation systems should be solely evaluated by their predictive accuracy, or also focus on other factors such as preference broadening. In order to appreciate the importance of this question, let us look at a couple of simulated scenarios in a dynamic setting. User […]
CWChris Wiltz·December 17, 2020AI & ML 
Implementing best SEO practice can produce immediate results, but long-term performance requires long-term maintenance. Besides, the journey is more important than the destination, isn’t it? The most beautiful, spectacular site in the world won’t do anyone much good if people can’t find it on Google (or Bing, or DuckDuckGo). This is not an exhaustive list, but hopefully there is enough to help you

Analyzing SUNBURST malware activity seen on Cloudflare’s public DNS resolver.

This year I learned about the canvas-confetti npm package. It is a simple JavaScript package that injects a (virtual, <canvas>) confetti explosion into

In an age where so much web design is already neat, clean, and simple, I can think of three ways to distinguish your site from the norm:

When I first got this writing prompt, my mind immediately started thinking stuff like, “What tech have I learned this year?” But this post isn’t really about

There was a time when I felt overwhelmed by how fast the web developed. It seemed like not a single day passed without a new plugin, framework, technique, or

I was recently looking for a way to perform scrolling effects on a project and I stumbled on the Locomotive Scroll library. It lets you perform a variety of

I enjoyed this blog post from Shawn. Lampshading is apparently the idea of a TV show calling attention to some weakness (like an implausible plot point) so

How the team moved to a virtual-first model

Part of the Building GitHub blog series. It’s four o’clock in the afternoon as you push the last tweak to your branch. Your teammate already reviewed and approved your pull request…

In the spring of 2019 — a full year before the COVID-19 pandemic caused the entire world to turn our living rooms into offices, schools, and gathering places — Mark Zuckerberg shared a plan to create the digital equivalent of the living room, where people could connect and hang out together. That work was already underway early […]
MEMeta Engineering·December 16, 2020Frontend 
In the first installment of the article, we examined why we built a React analytics library. We also looked at how we use the library to share data efficiently, log smarter impressions, and simplify event logging. In this second part of the article, we will focus on how we abstracted the library for use by…
FCFabio Canache·December 16, 2020Frontend 
Today, Suzanne Scacca is going to look at “The Website Dilemma”. In other words, is it possible to build an authoritative, lead generating, high converting website without manipulating visitors into doing what you want? If you follow social media’s lead, they’re one and the same. If you’d prefer not to trade your customers’ well-being for profit, keep reading.

Today we announce $40M in new funding to help everyone build the next web. Next.js and Vercel help teams collaborate and move faster with greater flexibility.

WCAG 2.1 Recommendations rolled out in 2018. It’s been a couple years now and there are some new Success Criterion. In this article, I will discuss Label in

Speaking of cool CSS stuff you can buy, Julia Evans' zine Hell Yes! CSS! is hot off the presses. A "zine" being 28 pages of "short, informative, and fun
CCChris Coyier·December 15, 2020Frontend 
In July 2020, we announced our intent to require the use of token-based authentication (for example, a personal access, OAuth, or GitHub App installation token) for all authenticated Git operations.…
ML
Matthew Langlois·December 15, 2020Security 
Temporary interaction limits have new, powerful, and flexible updates. You can now enable interaction limits for up to six months. In addition, you can limit interactions across all your personal…

Learn more about how we are bringing encapsulation to our views as we scale to over 4,500 templates in our Ruby on Rails monolith.

In this episode, we’re talking about GraphQL. What is it, and how does solve some common API problems? Drew McLellan talks to expert Eve Porcello to find out.

Monday Mornings with Customer Success: A monthly series brought to you by our Customer Success Team. This month's post is all about Cloudflare’s feature request process, and how we turn customer feedback into product improvements.

Here’s a scenario. You start a banging Kendrick Lamar track in one of your many open browser tabs. You’re loving it, but someone walks into your space and you
IU
Idorenyin Udoh·December 14, 2020Frontend 
The HTTP Archive looked at more than 7 million websites and compiled their annual report detailing how the sites were built. And there’s an enormous wealth of

GitHub is on a mission to accelerate human progress through developer collaboration. We do that by empowering our own employees to use their creativity to learn, play, and build great…

Next allows you to do server-side data-fetching, but what happens when that data needs to change on the client? This brief tutorial shows how to re-fetch the props without doing a full server reload.

What it is: Infer# brings the Infer static analysis platform to developers who use Microsoft’s C# programming language. It can already detect null-pointer dereference and resource leak bugs, thanks to bi-abduction analysis. Detection of race conditions based on RacerD analysis is also in the works. Infer# has been used to analyze Microsoft software, including Roslyn, […]

If you have used Redux at any point while developing an application to manage `state`, you will most definitely have come across reducers. In this tutorial, Fortune Ikechi will show you the concept of reducers and how they work, specifically in React applications. In order to understand and better use Redux, a solid understanding of reducers is essential. Reducers provide a way to update an applic
FIFortune Ikechi·December 14, 2020Frontend 
We’re launching Jurisdictional Restrictions for Durable Objects, making it easy for developers to build serverless, stateful applications that comply with data localization obligations.


Running a global network that complies with different privacy laws around the world requires coming back to the values that we have championed since our founding.

Allowing logging for payloads that trigger the Web Application Firewall has always led to end-user privacy concerns. We built encrypted matched payload logging to solve this!

Our researchers detected an updated wave of Microsoft SharePoint phish that are leveraging new COVID-19 restrictions to steal victims’ login information.

As quantum computing matures, R&D efforts in cryptography are keeping pace. We’re working with academia and industry peers to create new cryptography standards resilient to quantum computer attacks.

An event bus is a design pattern (and while we’ll be talking about JavaScript here, it’s a design pattern in any language) that can be used to simplify

Max Stoiber wrote some interesting notes about why he loves Tailwind. (Max created styled-components, so he has some skin in the styling methodology game.)

Learn what’s needed to migrate to and run a federated GraphQL API platform successfully.


Software and apps often solve very complex problems for businesses and consumers in the way of sales, marketing, finances, and so on. But offering a product that solves your users’ problems isn’t enough. If the UI is just as complex as the original problem, user churn is going to be high. Today, we’re going to look at some tips for designing a simple UI regardless of your solution’s complexity.

We think trust is fundamental to building a better Internet. Cloudflare adheres to industry-standard security compliance certifications and regulations to help our customers earn their users’ trust.

Workplace Records uses Access and Gateway logs to provide the state and country from which employees are working. Workplace Records can be used to help finance, legal, and HR departments determine where payroll taxes are due and provide a record to defend those decisions.

This year, I learned that there is a wide world of free stock imagery available beyond Unsplash and Pexels. You see, I’ve been working on designing WordPress

Black isn’t always slimming.

GitHub Campus Advisors are teachers who are enthusiastic about teaching with Git and GitHub. Whether or not they come from a technical background, they’re deeply passionate about technology and sharing…

What we look for from applicants, plus an overview of how the application process works.

Day 24: a short talk about blogging myths, and a debugging tip
JEJulia Evans·December 10, 2020Systems 
Day 23: a little Rails testing

How to convince "the business folks" to let you do what you want.

Designing a constrained exploration system […]

Facebook’s codebase changes each day as engineers develop new features and optimizations for our apps. If not validated, each of these changes could potentially regress the functionality or reliability of our products for billions of people around the world. To mitigate this risk, we maintain an enormous suite of automated regression tests to cover various […]
MEMeta Engineering·December 10, 2020SRE & Ops 

On December 16, 2020 we held Shipit! presents: Performance Tips from the Storefront Renderer Team. A video for the event is now available for you to learn more about how the team optimized this Ruby application for the particular use case of serving storefront traffic. Click here to watch the video. By Celso Dantas and Maxime Vaillancourt In the previous post about our new storefront rendering eng

On January 27, 2021 Shipit!, our monthly event series, presented Building a Culture of Resiliency at Shopify. Learn about creating and maintaining resiliency plans for large development teams, testing and tooling, developing incident strategies, and incorporating and improving feedback loops. The video is now available. Each year, Black Friday Cyber Monday weekend represents the peak of activity f
SEShopify Engineering·December 10, 2020SRE & Ops 
Modern websites aren’t inseparable from screens any more. Between phone assistants, home speakers, and screen readers, more and more people are using the web without even looking at it. Websites need to evolve in kind. In the article, Frederickk O’Brien will try to break down what that means for websites going forward, what designers can do about it, and why this might finally be a leap forward to

Cloudflare is deprecating the __cfduid cookie. While we have never tracked end-users across sites or sell their personal data, we don’t want any customer to think they need a cookie banner because of what we do.

Anyone can now sign up to use Cloudflare’s new privacy-first Web Analytics -- even without changing your DNS settings.