Philippe Serhal

@philippeserhal.com

746 Followers 1179 Following

💼 Staff Engineer @netlify.com, integrating all the frameworks 🔨 Open source maintainer @npmx.dev 🏡 https://philippeserhal.com

Screenshot showing "You sponsored @arp242 arp242 for $20 one-time 1 minute ago"
Pixel-art game-style stat card, titled “SERHALP,” with the subtitle “Turkish rapper and songwriter” and a highlighted stat reading “52 Strength.” A response from “GLM 4.7 Flash” says: “SERHALP is a Turkish rapper and songwriter known for his work in the Turkish hip-hop scene.” Below, a leaderboard lists several AI models, with only “GLM 4.7 Flash” showing a partial pink progress bar. The footer reads “IN THE WEIGHTS .COM.”
Screenshot of a dark-themed release history timeline. Version 4.0.0 is highlighted with a blue dot and labeled LATEST, published 24 minutes ago. Two green status entries appear beneath it: “Module type changed to ESM” and “Trusted publishing enabled.” Below, an older release, 3.1.1, is shown on the timeline with the label “3 months ago.”
Truncated screenshot of the GitHub comment component. It shows two tabs, "Write and "Preview", and a text input showing "Add your comment here...". The vertical line to the left of the tab pane is jagged, off by a single pixel below the tab.
Graph from npmx of an unspecified package showing an increase in install size from about 5 MB in version 3.5.0 to 22 MB in version 3.6.0, a plateau for several versions, and finally a drop to to 11 MB in version 4.4.0.
Screen recording of the npmx website. It starts on the package page for astro, showing among other things a heart/like button in the top right, showing a new "#5" badge. The cursor clicks the the badge, navigating to a “Likes Leaderboard” page. The leaderboard page is titled “Likes Leaderboard” with the subtitle “The 10 most liked packages on npmx right now.” The top three packages are shown as large cards as if on a medal podium, with preview images: `svelte` in first place with 205 likes, `nuxt` in second with 131 likes, and `vite` in third with 123 likes. Below them is a ranked list of other popular packages, including `vue`, `astro`, `typescript`, `react`, `vitest`, and others, each row showing the package name, a short description, package stats, and its like count. The video scrolls down and back up the leaderboard, then returns to a package detail page, demonstrating how package likes feed into a public leaderboard ranking.
Truncated screenshot of an npmx package page, showing "compare this package", a like button showing "88" with a small badge showing "#5", a "fund" button, a verified badge, and the latest version showing 6.4.2.
Bar chart titled “Firefox Security Bug Fixes by Month,” filtered to all sources and all severities. Monthly totals are mostly steady from January 2025 through January 2026, ranging from 17 to 31 fixes per month. The counts then rise sharply in early 2026: 61 fixes in February, 76 in March, and a very large spike of 423 fixes in April 2026.
Screenshot of a retro-futuristic arcade game interface titled “LEXICONNECT” in bright cyan text. It appears to be about atproto lexicons. On the left, a sidebar labeled “Assume a lexicon” lists searchable lexicon IDs such as app.bsky.feed.like, app.bsky.feed.post, app.bsky.feed.repost, and app.bsky.graph.follow, each with create and DID counts plus buttons like “ASSUME” or “CREW.” The center shows a dark starfield map with labeled nodes connected by glowing lines, including app.bsky.feed.post, app.bsky.feed.repost, app.bsky.feed.generator, app.bsky.graph.list, and app.bsky.graph.starterpack; a small triangular ship icon near the bottom is labeled “READY.” On the right, status panels show game stats including a large green “Reserve” value of 62,586, “Charge” 0, “Friend Chance” 0%, “Crew” 3, and “Live Lexes” 66,678. Below that are crew slots listing selected lexicons and an event log showing recent “flex” actions between lexicons.
Screenshot of a Tangled pull request status. It shows “2 commits,” “1/1 failed, ”no conflicts, ready to merge,” and "2min". Below, a comment from user “oppi.li” (with a green shield icon) says: “oh dear, this is a bug on our end, will sort!” "1min" ago.
Screenshot of a browser attempting to load github.com/npm/cli/issues/4828 but seeing a GitHub "Unicorn" error page.
Package download comparison line chart for: @netlify/vite-plugin-tanstack-st..., @tanstack/react-start. The Y axis represents the number of downloads. The X axis represents the date range, from 2025-04-27 to 2026-04-19, with a weekly time period. @netlify/vite-plugin-tanstack-st... starts at 0 and ends at 39.5K, showing a strong trend with a slope of 620.8 downloads per time interval, @tanstack/react-start starts at 31.5K and ends at 3.5M, showing a strong trend with a slope of 16.3K downloads per time interval. At the bottom, a watermark reads "./npmx a fast, modern browser for the npm registry".
A screen recording demonstrating npmx's command palette. The video shows: the npmx home page in dark mode; opening the command palette with Cmd+K to reveal navigation, connections, and settings sections; using the palette to toggle to light mode, then back to dark mode; using the palette to switch the interface language to Vietnamese and back to English; navigating to the Vue package page and using the palette to access package actions like "download tarball" and "copy package name"; browsing into the package's source files in the built-in code viewer; using the palette to switch between Vue versions from a list filtered by a semantic versioning specifier; and finally typing "tinyexec" into the palette to search for a different package. Throughout, individual key presses are shown in an on-screen overlay.
A still from the TV series Parks and Recreation showing Andy Dwyer in the scene where he says "I don't know who Al Gore is and at this point I'm too afraid to ask." This dialog is implied but not shown.
Screenshot of a truncated GitHub diff showing a misspelled "exhorbitant" with an extra "H" being changed to the correct "exorbitant", in the "deprecated" field of the package tar@7.5.2
Screenshot of a hypothetical npmx.dev package page for the package "jade". It shows a red warning banner indicating "Do not install this package. This package has been renamed to pug." pug is a link to the pug package page.
A chart from star-history.com showing the evolution of the number of GitHub stars that the Gatsby and Astro projects have had over time. It shows Gatsby climbing rapidly from 2017 to 2020, then slowing down markedly after that. It shows Astro appearing in 2021 and very quickly climbing at a faster rate. The obvious observation is that Astro has just recently in early 2026 surpassed Gatsby in number of stars (about 56,000) for the first time.
Screenshot of a Bluesky feed showing a post from ArkType announcing version 2.2, while just below tierney cyren (@bnb.im) shows a screenshot with a different package having a version 22.22.1 with the message "really hope we get one more patch release".
Screenshot of a Slack message by Philippe Serhal on July 29th 2024 that says "Do restaurants monitor Time to First Bite?"
Screenshot of a GitHub PR diff summary showing "+2-1,211,916"
Screenshot of the State of React 2025 results showing that for TanStack Start "17 respondents (0.63%) answered "Used it" and had a Negative sentiment"
Screenshot of the State of React 2025 results showing that for TanStack Query "28 respondents (1.03%) answered "Used it" and had a Negative sentiment"
A comparison table showing the npm packages "abcdefghijklmnopqrstuvwxyz" and "alphabet". Downloads/wk are respectively 5 and 2000; likes are 1 and 0; published Nov 11 2022 and Dec 31 2024; both are not deprecated; engines are "any" and "Node.js >= 0.10.0", module format is ESM and CJS, engines are MIT, and both have no vulnerabilities.
A screenshot showing the the npm package "abcdefghijklmnopqrstuvwxyz" has been liked 1 time.
Screenshot of npm.dev showing a package called "abcdefghijklmnopqrstuvwxyz", described as "Provides a string variable containing the modern English alphabet ('abcdefghijklmnopqrstuvwxyz'), to reduce typing and mistakes. A lightweight alternative to the alphabet package, with a streamlined API."
Screenshot of the npmx app showing an npm package named ifyouwanttogetthesumoftwonumberswherethosetwonumbersarechosenbyfindingthelargestoftwooutofthreenumbersandsquaringthemwhichismultiplyingthembyitselfthenyoushouldinputthreenumbersintothisfunctionanditwilldothatforyou.
Screenshot of the GitHub "pulse" page, showing: 432 Active pull requests 152 Active issues 381 Merged pull requests 51 Open pull requests 92 Closed issues 60 New issues "Excluding merges, 99 authors have pushed 482 commits to main and 540 commits to all branches." "On main, 410 files have changed and there have been 77,395 additions and 8,323 deletions"
A similar screen recording as the previous one, but in this case the selected package is `is-even`. Once selected, a warning shows "is-even: You might not need this dependency. The community has flagged this package as redundant, with the advice: Use (n % 2) === 0." and a call-to-action shows "+ Add WWJD?". Clicking this adds the "WWJD" option, which is the no dependency option. The column heading can be hovered to show an explanation, reading "James says: You might not need this dependency. Compare against writing it yourself! The e18e community maintains a list of packages that can be replaced with native APIs or simpler alternatives." Clicking the link leads to the e18e module replacements documentation.
A screenshot showing "You're now sponsoring @patak-dev", "Sponsorship amount: $32.00 / month", "Next billing date: February 11, 2026", along with patak's iconic cat avatar.
A screen recording of the "compare" page of the npmx web app. The user selects the underscore package, then the lodash package, then types "none" in the typeahead and sees "What Would James Do? @43081j approved" as an option, and similarly when typing "diy". When selected, a "What Would James Do?" column appears in the side-by-side package comparison. It shows that not adding a dependency adds zero bytes, zero dependencies, your choice of module format, engines, and so on.
The "Spider-Man pointing at Spider-Man" meme but both men are @43081j.
A similar screenshot to the previous, but for numeric values (pkg size, install size, dependencies) the largest value cell has a subtle solid background colour at full width and other cells in that row have a proportional-width left-aligned bg. Adjacent cells in a row are also now merged.
The same screenshot as previously but the whole UI is in French
Alternative mode of the previous screenshot. This is the card view, where each result is an airy card with minimal information that is not customisable.
Screenshot similar to the previous one, but in dark mode, showing customised columns and a structured search query with operators: `kw:markdown,content,docs,ui name:nu desc:app`. The results are filtered.
Screenshot of a secret npmjs.com alternative. It shows the page for an org, netlify, listing all its packages. The page has filters for weekly downloads, last updated time, security (coming soon), keywords, and scoped search by name, description, keywords, or all. The choice of columns is customizable: name, description, downloads/wk, last updated, maintainers, keywords, and more coming soon. Columns are sortable asc/desc. There is a choice of list view or card view. When paginating, page size is customizable.
Screenshot of a comparison of tsup and tsdown, showing that facets (downloads/wk, engines, license, etc.) can be selected at will.
Screenshot of a comparison table showing vue, svelte, and solid-js, three npm packages, with side-by-side facets: downloads/wk, package size, install size, module format, typescript status, engines, vulns, last updated, license, and num of dependencies
a screenshot of a soopersekret app showing a table of npm packages, with a dropdown menu containing the options "10 / page", "25 / page", "50 / page", "100 / page", and "All (YOLO)"
a screenshot of a table column showing the word "write" in each row, with unique alignment in each
Aaron Paul's character on Breaking Bad, distraught, saying "He can't keep getting away with it!"
A screenshot showing the heading "After" with an "index.js" file that is empty and "Code is fully removed âś…"
A graph view of `@netlify/blobs`'s dependencies shows 73 transitive dependencies, 42 of which come via `@netlify/otel`
A screenshot of a Vitest test suite where the test are using `fs.readFile()` to literally read the source files under test and asserting that they contain expected code and don't contain an expected TODO comment.