Blocks inline script and restricts everything to the origin. Tighten from here rather than loosening from nothing.
All Snippets
A collection of code, notes, and solutions.
Ed25519 rather than RSA: shorter, faster, and no key-size decision to get wrong.
Verifies a download actually matches what the publisher signed, rather than trusting the transfer.
The handful worth setting even when you are not using a framework that sets them for you.
Assert on the message, not merely that something threw. A typo raising TypeError would otherwise pass.
Node's mock timers make anything date-dependent deterministic without injecting a clock everywhere.
One test body, many cases, and a failure that names the case that broke.
The idiomatic Go pattern: a slice of cases and a subtest per entry, each named so failures are readable.
Caches the dependency install, runs on a matrix of versions, and fails the build on a lint error.
Running make with no arguments prints every target that carries a comment.
Names the built file after its contents so a deploy invalidates the cache without a version bump.
Caret ranges are how a build that passed last week fails today. Exact versions plus a lockfile remove the surprise.