Daily Edition · Page 5

THE DAILY INDEX

Technology, AI, software, security, crypto and business

ARTICLES & TUTORIALS

TLDR Web Dev

HOW RUBYGEMS.ORG PROTECTS OUR COMMUNITY'S CRITICAL OSS INFRASTRUCTURE

RubyGems.org uses a multi-layered security approach including automated detection, risk scoring, and retroactive scanning to proactively identify malicious gems, successfully detecting 70-80% of threats before they're publicly reported. In a recent incident involving credential-stealing gems discovered by Socket.dev, the RubyGems security team had already flagged and removed nearly all malicious packages within days of detection in July.

SAY BYE WITH JAVASCRIPT BEACON

The JavaScript Beacon API provides a reliable way to send data to servers when users leave a website. This is unlike traditional methods like XMLHttpRequest or fetch in “beforeunload” events, which often fail because browsers don't wait for JavaScript execution when navigating away. The Beacon API works as a "fire-and-forget" mechanism with a simple syntax (`navigator.sendBeacon()`), allowing the browser to send the request immediately without waiting for a response, though it's limited to small amounts of data and only supports POST requests.

HOW MUCH SHOULD YOU SPEND ON ACCESSIBILITY?

Digital accessibility should be treated as a core compliance investment. Companies generally spend 3-10% of annual revenue on compliance overall, making accessibility investments range from 0.1-0.5% of total revenue for most organizations. The cost of non-compliance is nearly three times higher than compliance costs, making proactive accessibility investment both a legal necessity and a good opportunity to reach over 1 billion people with disabilities worldwide.

AUTOLINKING'S BROKEN PROMISE

Dependency management is complex in Expo and React Native apps, partly due to the "broken promise" of autolinking to simplify native module dependencies. Expo SDK 54 has several fixes, including direct Metro dependencies, removing implicit dependencies, consistent autolinking, and a CLI fallback resolver, to address these challenges and support various package managers and monorepos. The updated autolinking system now discovers transitive dependencies, allowing `expo-doctor` to proactively report duplicate modules and potential conflicts for developers to resolve.

TLDR IndexPage 5