quoting this to pin it 😎

I am looking for my next career opportunity!

I'm Corbin Crutchley; an engineering leader, consultant, author, and open-source maintainer.

Previously as a VP of Eng, I've sped up engineering efforts for companies. My teams rework large-scale systems while building new features at the same time.

You may also know of my OSS projects (@tan_stack & others) or my books (@playful_program).

Roles I'm looking for:

- CTO / VP of Engineering for small/medium companies
- Staff+ Engineering roles, esp developer tooling
- Consulting gigs

Likewise, if your project is particularly challenging and / or complex, let's talk.

Know of a good role for me? Book some time on my website or reach out in direct messages:

corbincrutchley.com

Now that Schema Benchmarks has been officially released for 7 months, I thought it'd be useful to look at how it's improved over that time, and how it's helped the ecosystem!
schemabenchmarks.dev/blog/7-month-u…

thanks to @dzakh_dev, Schema Benchmarks now measures the typescript performance of libraries!

schemabenchmarks.dev/typescript

as with all of our benchmarks, this is a single aspect of schema performance, and how much it matters is up to you :)

the goal of Schema Benchmarks is to transparently benchmark as many aspects as possible, allowing users to make an informed decision for their needs.

(for example, you may care a lot less about bundle size if you're not shipping to the browser)

Formisch v1 is finally in RC! 🎉

After a year of long nights, the form library I wish existed when I was building complex forms for my first startup is here.

Schema-first. Fully type-safe. Tiny (starts at 2.5 kB). And not just React — it runs on 6 frameworks from one core.

Read the announcement and try it today 👇
formisch.dev/blog/formisch-…

It's Redux release day! Shipped RTK 2.12.0, React-Redux 9.3.0, and Reselect 5.2.0

Highlights:

- RTK skills files
- `connect` is officially deprecated! Don't use it! :)
- Fixed trusted publishing

github.com/reduxjs/redux-…

github.com/reduxjs/react-…

github.com/reduxjs/resele…

SECURITY ADVISORY — TanStack npm packages
A supply-chain compromise affecting 42 @TansTack/* packages (84 versions total) was published to npm earlier today at approximately 19:20 and 19:26 UTC. Two malicious versions per package.
Status: ACTIVE — packages are deprecated, npm security engaged, publish path being shut down.
Severity: HIGH — payload exfiltrates AWS, GCP, Kubernetes, and Vault credentials, GitHub tokens, .npmrc contents, and SSH keys.
If you installed any @tanstack/* package between 19:20 and 19:30 UTC today, treat the host as potentially compromised:
• Rotate cloud, GitHub, and SSH credentials immediately
• Audit cloud audit logs for the last several hours
• Pin to a prior known-good version and reinstall from a clean lockfile
Detection — the malicious manifest contains:
"optionalDependencies": {
"@tanstack/setup": "github:tanstack/router#79ac49ee..."
}
Any version with this entry is compromised. The payload is delivered via a git-resolved optionalDependency whose prepare script runs router_init.js (~2.3 MB, smuggled into each tarball at the package root).
Unpublish is blocked by npm policy for most affected packages due to existing third-party dependents. All 84 versions are being deprecated with a SECURITY warning, and npm security has been engaged to pull tarballs at the registry level.
Full technical breakdown, complete package and version list, and rolling status updates:
github.com/TanStack/route…
Credit to the security researcher for responsible disclosure.

🚀 Valibot v1.3 is here!

✅ Smarter pipelines with `guard()` for type refinement & `parseBoolean()` for boolish inputs (env vars, forms, query strings).

✅ Result caching via `cache()` / `cacheAsync()` for repeated & async validations.

✅ New validators: `domain()`, `jwsCompact()`, `isrc()` + important compatibility fixes.

Huge thanks to @eskimojo, @yslpn and many others for contributing to this release! 🙌

Full details + examples 👉 valibot.dev/blog/valibot-v…

npm i valibot@latest

#Valibot #TypeScript

Shoutout for @eskimojo for the implementation and TypeBox for being currently the fastest ⚡️

🚨 Exciting update! Our Schema Benchmarks OSS project now has a dedicated section for Standard Schema.

Check it out and discover how fast your favorite Standard Schema libraries like @valibot, @zodtypes, @arktypeio, @EffectTS_ and more really are! 📈

Which one surprises you the most? 👀

schemabenchmarks.dev/standard

#TypeScript #WebDev #OpenSource #StandardSchema

Incredibly hyped to announce Schema Benchmarks, a project I've been steadily working on in collaboration with @FabianHiller!

It aims to provide a central and transparent resource for many of the metrics that matter for schemas, including bundle size and runtime performance 😄

@colinhacks excuse the ping, but I'm wondering if this is a bug - I'm just not sure if it's a bug our side or Zod's. based on the docs i wouldn't expect to see locales included in the compiled output 🤔

before compilation: schemabenchmarks.dev/repo/raw/schem…

after schemabenchmarks.dev/repo/raw/schem…

@colinhacks update: my bad!
(though i do think this is a mistake that could be made by an end user - i'm curious what about the default export breaks tree shaking)
x.com/eskimojo/statu…

Our current results, starting with bundle size (compiled with @rolldown_rs):

Typia and Valibot lead here, with very similar results (~1.9KB minified + gzipped). Zod brings up the rear, maybe due to its extensive language support. Its mini variant however is far smaller, at 5KB.

@rolldown_rs an update to this:
i noticed a discrepancy between our zod benchmark and zod's docs, namely that we were using a default import and the docs show a namespace import.

updating our benchmark to match the docs brought zod down to a much more reasonable 16KB.

Now for parsing; where the schema returns a new value. We mark try/catch tests with *, and "abort early" tests with †.

Libraries that can abort early (Valibot, Effect, joi) have an advantage with invalid data, and Typebox clocks in slowest, constrasting its validation results.

quick update re: Typebox - it had been slowed down by a feature in v1 that attempts to coerce an invalid value into a valid one. v1.1 now makes that feature opt-in.

here's an updated set of results, with a vast improvement in typebox's performance:

🚨 Missed our big announcement yesterday? We launched schemabenchmarks.dev! 🎉

An open-source project comparing top JS schema libraries like @zodtypes, @valibot, @arktypeio, Typia, TypeBox, @EffectTS_ and more. 🧩

Dive into metrics on download time, schema creation, and parsing speed. 🔥

Check it out now and see who's leading the pack: schemabenchmarks.dev/blog/welcome

@FabianHiller We'll also aim to expand to other types of benchmarking and comparison - I'm already investigating capturing error messages and traces, inspired by x.com/techsavvytravv…

Proud to have teamed up with @eskimojo on Schema Benchmarks! 🙌

Valibot and Typia neck-and-neck on bundle size (~1.9KB gzipped)—the fight for the smallest bundles is heating up! 🔥

Transparent metrics like these help us all improve—dive in and let us know what you think!

schemabenchmarks.dev

@FabianHiller this was also a great opportunity to try out a bunch of new tech - we're currently running on Vite 8 (beta), @tan_stack Start (+ Query + Pacer), and using Oxfmt/Oxlint/TSGo 👀

To see our results in depth, check out schemabenchmarks.dev!

Reckon we've missed a library, or thought of an improvement to our methodology? We'd love to hear from you! github.com/open-circle/sc…

Want to do one better and DIY? Thanks! Give this a read: schemabenchmarks.dev/contributing