#node_modules
Depflush – Clean up macOS development leftovers. Scans for stale Docker images, node_modules, database dumps and other junk; lists sizes before moving items to Trash.

👉 github.com/cypriennkene...
September 26, 2026 at 10:51 AM
There goes the entire release cycle...

🔔 Hit follow for more tech memes!

#DevLife #Coding #SysAdmin #SoftwareEngineer #ProgrammingHumor
September 26, 2026 at 8:58 AM
tobi/disktree — 爆速なGPU描画でストレージの「犯人」を即座に特定

・Zed譲りのGPUIとRustを採用。巨大なディレクトリ階層も一瞬でタイルマップ化
・削除対象を一旦マークし、一括レビュー後にコミットする安全なワークフロー
・肥大化したビルドキャッシュやnode_modulesの整理に抜群の威力を発揮

今週スターが急増している、Omarchyエコシステムの注目ツールです。

#Rust #OpenSource
disktree
A treemap for finding and removing what fills your disk, for Omarchy. Rust + GPUI.
github.com
September 26, 2026 at 2:09 AM
Nice drop. If you want it lower still: npm ci --omit=dev in the final stage, copy only dist + prod node_modules onto node:26-slim, then run dive on the result. The usual leftover is the ~/.npm cache or devDeps that leaked into the runtime layer.
September 25, 2026 at 9:35 AM
Short follow-up it looks like vite and anything based on rolldown is also out. They both install (unlike parcel), but "Error: Unsupported OS: netbsd, architecture: x64" pops out of vite and the stack trace includes "node_modules/rolldown".
September 24, 2026 at 9:31 PM
🧹 DiskSweep: Developer-focused disk cleaner for macOS. Thoughtfully built for Apple platforms.

• Visual Space Explorer
• Finds node_modules, Xcode caches, and build junk
• Exports PDF and CSV scan reports

🔗 https://github.com/beyondthecode-bc/DiskSweep

#macos #storage #developer #indiedev
September 24, 2026 at 6:31 PM
Two settings worth changing: raise _ZO_MAXAGE (I use 100x the default, room for many dirs) and exclude noise with _ZO_EXCLUDE_DIRS for .cache, .git, node_modules, .venv, target, dist and build.

The whole database is a single file under .local/share/zoxide. Small tool, daily use.
September 23, 2026 at 7:15 AM
📦 tito10047/asset-mapper-test-bundle 0.2.2

A Symfony bundle that bridges the gap between Symfony AssetMapper and Node.js test runners by creating a symlink-based node_modules structure from your import map.

🔗 https://github.com/tito10047/asset-mapper-test-bundle
September 22, 2026 at 1:22 PM
Why your Docker images are too big (and how to fix it)
I've seen production Docker images over 2GB. For a Node.js app. That's 10x larger than it needs to be. Here's how to shrink them. ## The Usual Suspect FROM node:20 WORKDIR /app COPY . . RUN npm install CMD ["node", "server.js"] This image: ~1.1GB. Why? * `node:20` base image: ~900MB (full Debian + build tools) * `node_modules` with dev dependencies * Source files, `.git`, tests, docs all included ## Fix 1: Use Alpine FROM node:20-alpine WORKDIR /app COPY package*.json ./ RUN npm ci --production COPY . . CMD ["node", "server.js"] Image: ~150MB. `node:20-alpine` is ~130MB vs ~900MB. ## Fix 2: Multi-stage Build # Build stage FROM node:20-alpine AS builder WORKDIR /app COPY package*.json ./ RUN npm ci COPY . . RUN npm run build # Production stage FROM node:20-alpine WORKDIR /app COPY --from=builder /app/dist ./dist COPY --from=builder /app/package*.json ./ RUN npm ci --production && npm cache clean --force CMD ["node", "dist/server.js"] Image: ~100MB. Build tools and dev deps stay in the build stage. ## Fix 3: .dockerignore node_modules .git .env* *.md tests coverage .github docker-compose*.yml Without this, `COPY . .` copies everything — including `.git` (often 100MB+). ## Fix 4: Order Layers for Caching # Bad: any code change invalidates npm install cache COPY . . RUN npm ci # Good: npm install only reruns when package.json changes COPY package*.json ./ RUN npm ci --production COPY . . Docker caches layers. Put rarely-changing steps first. ## Fix 5: Distroless (for Go, Java, Python) # Go example FROM golang:1.22-alpine AS builder WORKDIR /app COPY . . RUN CGO_ENABLED=0 go build -o /server . FROM gcr.io/distroless/static COPY --from=builder /server /server CMD ["/server"] Image: ~15MB. Distroless has no shell, no package manager — just your binary. ## Quick Wins Summary Technique | Typical Savings ---|--- Alpine base | -70% Multi-stage | -30-50% .dockerignore | -10-30% `--production` flag | -20-40% Distroless | -90% (compiled langs) ## Checking Image Size docker images myapp docker history myapp:latest # See each layer's size docker scout quickview myapp # CVE scan + size analysis What's the smallest Docker image you've built? I got a Go API down to 8MB once.
dev.to
September 22, 2026 at 5:43 AM
Mole does the work of four Mac cleanup apps from one terminal command. Every destructive command has a dry run, and one command reclaims old node_modules, target and venv folders.
https://botmonster.com/coding/mole-mac-cleaner-terminal/?utm_source=bluesky&utm_medium=social
September 21, 2026 at 9:12 PM
I prototyped this a while ago but I had to do a lot of really annoying hacks around it with relative paths in node_modules and I decided it was worse than the current setup github.com/NotNite/moon...
moonlight-ts-test/packages/types/tsconfigs/README.md at main · NotNite/moonlight-ts-test
Contribute to NotNite/moonlight-ts-test development by creating an account on GitHub.
github.com
September 21, 2026 at 3:55 PM
"prepack" happens before packing. This is where your build script should go.

"prepublishOnly" happens before publishing. I can’t think of any use case for that.

"dependencies" runs if `npm install` changes your node_modules. This is the right place for something like "husky". It’s a bit more niche
September 20, 2026 at 8:10 PM
Coucou ! Des gens calés en Flatpak et/ou Electron ? J'essaye de packager mon appli Electron avec Electron Forge, et malgré ce que j'ai tenté en lisant les forums, je tombe toujours sur une erreur obscure...
September 20, 2026 at 10:24 AM
Writing your own hosting.ignore in firebase.json does not extend Firebase's defaults — it replaces them. "ignore": ["node_modules"] drops "**/.*", and the next deploy serves /.env.production at a guessable URL. One 23-line sample config:…

https://getreadystack.com/tools/firebase-deploy-leak-audit
September 19, 2026 at 7:32 AM
Llevo 35 minutos trabajando y ya he borrado node_modules dos veces. Creo que huí del frontend justo a tiempo.
September 18, 2026 at 6:40 AM
Not all heroes wear capes... at least the @e18e.dev team doesn't. They’re on a mission to make the JS ecosystem lighter and faster.

So we’re donating to them as part of our OSS donation program. They've already reduced node_modules size and made Node.js tooling much faster, and we appreciate it!
We’re donating to DOMPurify as part of our open source donation program. DOMPurify, built and maintained by Cure53, is the best tool to protect your website from XSS attacks.

They are doing an amazing job at tracking all new potential attacks. We respect and rely on their findings.
As part of our OSS donation program, this month we're celebrating @gregberge.com.

He’s the maintainer of ~20 OSS projects, including SVGR.

SVGR transforms SVG files into React components. It also works with Webpack, Vite, and Next.js.
September 17, 2026 at 1:53 PM
Good News for everyone.
Meet Markify: The Zero-Install, Zero-Build Documentation Engine Building technical documentation shouldn't require downloading hundreds of megabytes of node_modules or configuring complex JavaScript build pipelines. If you are tired of build steps breaking just to update a few Markdown pages, meet Markify. What is Markify? Markify is a lightweight, zero-install, zero-build client-side documentation engine. It fetches raw Markdown files directly in the browser using modern Web APIs and renders them into a sleek, interactive Single Page Application (SPA). Zero Setup: No npm install, no Webpack, no Vite. Glassmorphic UI: Built-in modern glassmorphism design with dynamic Light and Dark mode support. Instant Search: Client-side full-text search powered by FlexSearch with Ctrl + K shortcut support. Dynamic ToC: Automatic Table of Contents generated from your headings. Code Copy and Highlight: One-click code snippet copying with Prism.js syntax highlighting. Quick Start in 2 Minutes All you need is a single index.html file in your repository. File Structure my-docs/ ├── index.html ├── _sidebar.md └── README.md Define Navigation (_sidebar.md) Getting Started Home Quick Start Configuration Launch Serve your folder using any local HTTP server (like VS Code Live Server or python3 -m http.server 8000), and your documentation is live! Try It Out and Contribute Markify is completely open-source under the CC-BY-NC-SA 4.0 license. GitHub Repository: https://github.com/Markify-tools/home Documentation Wiki: https://github.com/Markify-tools/home/wiki Give it a star on GitHub if you find it useful, and feel free to share your feedback below!
dev.to
September 17, 2026 at 1:39 PM
that's always been my biggest annoyance with package listings on NPM (and now seemingly NPMX). Yes, download size and install size in node_modules matter... but those are often radically different than bundle size shipped to the browser, and that doesn't get surfaced very well.
September 16, 2026 at 2:00 PM
@xeiaso.net This is mean
September 16, 2026 at 1:20 AM
Every Dockerfile starts at 50MB and ends at 2.7GB. node_modules happened in between.
September 15, 2026 at 8:50 PM
CVE-2026-57442 - MCPVault: PathFilter restricted directories (.git/.obsidian/node_modules) only denied at vault root, not nested
CVE ID : CVE-2026-57442

Published : Sept. 15, 2026, 5:50 p.m. | 15 minutes ago

Description : MCPVault is a lightweight Model Context Protocol ...
CVE-2026-57442 - MCPVault: PathFilter restricted directories (.git/.obsidian/node_modules) only denied at vault root, not nested
MCPVault is a lightweight Model Context Protocol server for safe access to files in an Obsidian vault. Prior to 0.11.5, PathFilter in src/pathfilter.ts uses root-anchored deny-list patterns, so nested .git, .obsidian, and node_modules path segments do not match the restriction and pass both isAllowed() and isAllowedForListing(). An attacker who influences …
cvefeed.io
September 15, 2026 at 7:23 PM
CVE-2026-57441 - MCPVault: PathFilter restricted-directory deny-list bypass via case and trailing dot/space equivalence
CVE ID : CVE-2026-57441

Published : Sept. 15, 2026, 5:49 p.m. | 16 minutes ago

Description : MCPVault is a lightweight Model Context Protocol server fo...
CVE-2026-57441 - MCPVault: PathFilter restricted-directory deny-list bypass via case and trailing dot/space equivalence
MCPVault is a lightweight Model Context Protocol server for safe access to files in an Obsidian vault. Prior to 0.11.4, PathFilter in src/pathfilter.ts compiles restricted-directory patterns case-sensitively and compares paths without canonicalizing filesystem-equivalent segment names. On case-insensitive macOS and Windows filesystems, case variants of .git, .obsidian, or node_modules pass both …
cvefeed.io
September 15, 2026 at 7:17 PM
Our game is built with Deno from the ground up. #deno #BuiltWithDeno

Deno gives us a runtime built for today: native TypeScript, security by default, and no `node_modules` bloat. Our code stays maintainable and readable for years to come.

See our designs: civica.snowdevelopments.co/design
Civica — Design Map
civica.snowdevelopments.co
September 15, 2026 at 7:14 PM
推薦一下今天找到的硬碟清理器 ClearDisk,它不只找出佔空間的大檔案,還可以找出更佔空間的零碎檔案,包括瀏覽器快取、Docker 映像、npm 快取、Spotify 快取、Steam 快取等各大開發工具、應用快取,它幫我清理了 50G 的空間,開源免費無廣告,真心推薦。

https://github.com/bysiber/cleardisk
GitHub - bysiber/cleardisk: Free macOS menu bar app to visualize and clean developer caches (Xcode, node_modules, CocoaPods, SPM, Docker, pip, Cargo). Reclaim disk space instantly.
Free macOS menu bar app to visualize and clean developer caches (Xcode, node_modules, CocoaPods, SPM, Docker, pip, Cargo). Reclaim disk space instantly. - bysiber/cleardisk
github.com
September 15, 2026 at 10:47 AM