Andrey Sitnik

t.me/raziltwo/

Not only Arabs and Jews write from right to left.

The “Hungarian runes” are also written from right to left. They even have uppercase and lowercase letter forms (which is quite a rare feature outside the Latin and Cyrillic scripts).

en.wikipedia.org/wiki/Old_Hun...

All this 20th-century abstract art is being used very actively and utilitarily in UI today.

​Macintosh 1984 vs Picasso 1964

Meet Andrey (@en.sitnik.es ), our frontend principal and the creator of PostCSS.

He was our first hire ever and has been a Martian for 15 years.

Andrey is based in Barcelona, is a loving father, and is always down to meet up with martians IRL.

Check him out: evilmartians.com/martians/and...

Kimori

A screenshot of the node-is-arrayish package on GitHub, showing that the package has 17 stars and 29.6 million user

Do the stars really better reflect the usage of a package?

Breaking: China's official statistics report a 0.3% drop in CO2 emissions from energy&industry in 2025, the third time that annual emissions have fallen this century and the first fall predominantly driven by clean energy growth. 🧵

Bit of trivia regarding the trend of more US Americans moving abroad: we now have more Americans living in Norway than Norwegians living in the US.
🇺🇸 ➡️🇳🇴

“if you won’t let us use your product to spy on Americans and kill without supervision we will single-handedly destroy your business by fiat” is the single most authoritarian anti-business action I can ever remember any administration taking

JSR now lets you diff the generated documentation between released versions of a package, making it easy and clear what has changed in a visual manner!

Example: jsr.io/@david/gagen...

I am quite honestly impressed that Anthropic declined Trump’s demand. The first time ya gotta hand it to an AI company

Enthusiasts are still building custom firmware for classic HP48 engineering calculators.

But the creator of DB48X says new age-verification laws in California (2027) and Colorado (2028) will ban users there, since the calculator OS simply cannot verify anyone’s age.

github.com/c3d/db48x/co...

We’re doing this so we don’t hide each person’s contribution and so clients can immediately see how strong the specialist joining their project really is.

Just take a look at the awesome personal pages we’ve created for developers/designers on @evilmartians.com.

My profile is ready too.

evilmartians.com/martians/and...
evilmartians.com/martians/art...
evilmartians.com/martians/ale...
evilmartians.com/martians/ant...
evilmartians.com/martians/gle...

Solving the Nebraska problem with the Open Source Endowment—Martian Chronicles, Evil Martians’ team blog Konstantin Vinogradov, an open source and infra VC investor, and his co-founders are building the first permanent funding model for critical open source infrastructure. We dive into why OSE stands a c...

PostCSS powers 0.5% of ALL web pages but only earned $300/month for 13 years. This story is not unique.

Your app likely has 550+ OSS dependencies. Most are one burned-out maintainer away from disaster.

This is the Nebraska problem. And here is the fix:
evilmartians.com/chronicles/s...

Tickets for Local-First Conf 2026 are now on sale

July 12–14 · Berlin · 300 people · single track

Theme: user empowerment in an age of fluid software.

We're going beyond CRDTs and sync. If you're building for user agency, this is your conference.

Tickets live now → localfirstconf.com

Life's too short to hand-write API types: OpenAPI-driven React—Martian Chronicles, Evil Martians’ team blog Transform your React development with contract-first APIs. Generate TypeScript types, build type-safe clients, and develop with mocks while backend implements—no more waiting, no more integration chao...

You’re still hand-writing API types in 2026? Your OpenAPI spec can generate TypeScript types, API clients, Zod schemas, and network-level mocks — so you ship features before backend deploys anything.
Yuri Mikhin walks through the full setup with Hey API, Nanostores, and MSW.

Trusted Types is a really powerful API against XSS.

web.dev/articles/tru...

It forbids assigning a string to Node#innerHTML. Instead, you need to create a policy (and register its name in the Content-Security-Policy header) and process the string through it.

github.com/hplush/slowr...

Tholmad is a very unique writing system for the constructed language Vorgath.

The script is inspired by the seals of demons from the real medieval grimoire Ars Goetia (PostCSS version logos are based on these seals).

www.youtube.com/watch?v=JBt9...

t.me/alicesmovies...

SCP is what happens when horror becomes part of bureaucracy.

And then there’s Mystery Flesh Pit — a story about what happens when horror becomes part of capitalism, complete with theme parks and resource extraction.

en.wikipedia.org/wiki/Mystery...

In Spain (province of Cádiz), there was a local tradition of fully covered women, “cobijada”. The woman was completely wrapped in black, with only one eye visible through the fabric.

This tradition is not related to the Islamic burqa and emerged independently.

es.wikipedia.org/wiki/Cobijada

Each year, according to its own data, Australia's National Health and Medical Research Council (NHMRC) invests about six times more money into women's health research than men's health research.

The staff at NHMRC is 70% female.

Just found out that Gandi (which used to be the best domain company) was acquired by a shady company that jacked up prices.

Now I’m looking for a good domain provider with .es domains, hardware security key 2FA, and based in Europe (most likely Netim).

Even the database will be stopped if there are no HTTP requests?

There’s a long-standing idea that implicit throw/catch isn’t as practical as it seems, and errors should be returned explicitly (as in Go).

For TypeScript, a proposal suggests returning either a value or an error so the type system enforces handling.

errore.org

Am I right that one server working the whole month costs around 20$?

I like their DX.

Does it have linear growing pricing when your project age going to have more and more clients?

RFC 9449: OAuth 2.0 Demonstrating Proof of Possession (DPoP) This document describes a mechanism for sender-constraining OAuth 2.0 tokens via a proof-of-possession mechanism on the application level. This mechanism allows for the detection of replay attacks wit...

What I don’t like about DBSC is that the cookie has to be continuously refreshed via a separate HTTP request.

The DPoP approach, where you simply re-sign the cookie+timestamp on every request, seems simpler.

datatracker.ietf.org/doc/html/rfc...

Dmitry Chapala