Show Notes online - http://podcast.thinkingelixir.com/299

Elixir Community News

• https://paraxial.io/ – Paraxial.io is sponsoring today's show! Sign up for a free trial of Paraxial.io today and mention Thinking Elixir when you schedule a demo for a special offer.
• https://marketing.erlef.org/news/grant-petition.html – The Erlang Ecosystem Foundation is seeking community backing for a grant that would fund two full years of work on the Ægis security project — improving how packages are published, verified, and trusted across Hex and the broader ecosystem. The deadline to show support is April 17th.
• https://hex.pm/blog/security-audit – Hex.pm published the results of its first comprehensive third-party security audit, made possible by Alpha-Omega under the OpenSSF. Two firms — Paraxial.io and zentrust partners GmbH — reviewed the Hex registry, clients, documentation infrastructure, and supporting systems. Three high-severity issues were found and have all been fixed.
• https://paraxial.io/blog/hex-pentest – Michael Lubas of Paraxial.io shares details of the white-box penetration testing performed on Hex.pm as part of the Ægis security audit.
• https://hex.pm/reports/2026/zentrust.pdf – The published report from zentrust partners GmbH covering their adversarial/red-team style assessment of Hex.pm, including 3 high-severity findings (all now fixed) plus medium and low severity items.
• https://x.com/josevalim/status/2042245524116439169 – José Valim announces a massive update to Tidewave, teasing several days of videos and screenshots covering new features.
• https://hexdocs.pm/tidewave/ui_variants.html – Documentation for Tidewave's new UI Variants feature, which lets your coding agent build different versions of a page or UI component so you can pick and refine your favorite — all integrated directly in the browser.
• https://www.youtube.com/watch?v=8px8GdpID74 – Video demo of Tidewave's new UI Variants feature in action.
• https://x.com/adamwathan/status/2041977909502489060 – Adam Wathan (creator of TailwindCSS) shows off ui.sh, a set of skills for creating UIs in coding agent CLIs like Claude Code and Codex — noted as a comparison point to Tidewave's more integrated, browser-native experience.
• https://x.com/josevalim/status/2042608254065287565 – José Valim demos Tidewave's new "vision" mode, which lets your coding agent take screenshots and record videos of your web app — including demoing a feature working on both desktop and mobile resolutions and delivering results to Slack.
• https://x.com/josevalim/status/2042581154067337280 – José Valim announces that Hex.pm will now serve llms.txt files for Elixir/Erlang packages if the accept header is text/markdown. Package authors using ExDoc should update to the latest version and republish their docs.
• https://github.com/remoteoss/dexter – Remote released Dexter, a new Elixir LSP written in Go. An interesting alternative to the official LSP, though its positioning relative to the official tooling raises some questions.
• https://github.com/typhoonworks/lotus – Lotus is an embeddable BI (Business Intelligence) engine for Elixir apps featuring an SQL editor, dashboards, visualizations, and AI-powered query generation that mounts directly into a Phoenix app — no Metabase, Redash, or extra infrastructure needed.
• https://lotus.typhoon.works/lotus – The Lotus demo app showcasing its latest features including an AI-powered query assistant (BYOK), dashboards with filters and public sharing, 16 chart types, improved query results with right-click filtering and sorting, and more.
• https://github.com/ghostty-org/ghostty – Ghostty is a fast, feature-rich, native terminal emulator. Its libghostty library is a cross-platform C and Zig library for building terminal emulators or embedding terminal functionality into applications.
• https://github.com/dannote/ghostty_ex – ghostty_ex is an Elixir library that wraps libghostty-vt, bringing a SIMD-optimized VT parsing terminal emulator to the BEAM. Terminals are GenServers, with full Unicode, 24-bit color, and scrollback with text reflow.
• https://github.com/dannote/ghostty_ex?tab=readme-ov-file#liveview – The LiveView integration section of the ghostty_ex README, showing how to install the LiveView hook into a Phoenix app and use the Ghostty.LiveTerminal.Component to handle keyboard events and PTY lifecycle.
• https://x.com/flaviocopes/status/2039973060158095827 – Flavio Copes explains how Axios was compromised via a targeted ClickFix attack — a social engineering technique that tricks maintainers into pasting malicious text into their terminal.
• https://github.com/axios/axios/issues/10636 – Public post-mortem from the Axios team on the npm supply chain compromise, shared with the community for transparency and awareness.
• https://cybersecuritynews.com/clickfix-attack/ – An explainer on the ClickFix attack — how hackers use it to trick users into running malware by pasting content from the web into their terminal.
• https://github.com/axios/axios/issues/10636#issuecomment-4182134203 – A GitHub comment documenting multiple recent instances of similar ClickFix-style supply chain attacks across other open source projects.
• https://x.com/simonw/status/2040080868958765229 – Simon Willison weighs in on the Axios supply chain attack via ClickFix social engineering.
• https://simonwillison.net/2026/Apr/3/supply-chain-social-engineering/ – Simon Willison's write-up on the Axios supply chain attack and the social engineering tactics used — noting how time pressure during meetings makes maintainers especially vulnerable to quickly clicking through install prompts.

Do you have some Elixir news to share? Tell us at @ThinkingElixir or email at show@thinkingelixir.com

Find us online

• Message the show - Bluesky
• Message the show - X
• Message the show on Fediverse - @ThinkingElixir@genserver.social
• Email the show - show@thinkingelixir.com
• Mark Ericksen on X - @brainlid
• Mark Ericksen on Bluesky - @brainlid.bsky.social
• Mark Ericksen on Fediverse - @brainlid@genserver.social
• David Bernheisel on Bluesky - @david.bernheisel.com
• David Bernheisel on Fediverse - @dbern@genserver.social

Sponsored By:

• Paraxial.io: Paraxial.io is sponsoring today's show! Sign up for a free trial of Paraxial.io today and mention Thinking Elixir when you schedule a demo for a special offer.

Show Notes online - http://podcast.thinkingelixir.com/298

Elixir Community News

• https://paraxial.io/ – Paraxial.io is sponsoring today's show! Sign up for a free trial of Paraxial.io today and mention Thinking Elixir when you schedule a demo for a special offer.
• https://hex.pm/blog/hex-v24-released#website-redesign – The hex.pm website received a major redesign. Package pages now show the README directly, search results show more info at a glance, and the dashboard was reworked. Thanks to Paulo Valim for implementing the new design.
• https://x.com/hexpm/status/2039764266471784603 – The local hex package was updated to v2.4, replacing password-based authentication with an OAuth device flow and adding two-factor authentication support to the CLI, significantly improving the security of publishing packages.
• https://hex.pm/blog/hex-v24-released – Official Hex 2.4 release blog post covering the OAuth device flow, two-factor authentication support, and other improvements.
• https://x.com/tylerayoung/status/2038614593958732194 – Announcement tweet for the official v0.1 release of Expert, the new official Elixir LSP.
• https://github.com/elixir-lang/expert/releases/tag/v0.1.0 – The v0.1.0 release of Expert, the new official Elixir Language Server Protocol implementation, is now final.
• https://formulae.brew.sh/formula/expert – Expert is also available on Homebrew, making it easy to install on macOS.
• https://github.com/elixir-lang/elixir/releases/tag/v1.20.0-rc.4 – Elixir v1.20.0-rc.4 was released. Notable enhancements include showing undefined function errors even when missing variables, adding Process.get_label/1, and fixing URI.merge leaking a :+ marker when the base path is an empty string.
• https://bsky.app/profile/adrienanselme.com/post/3mietrjv3462i – Bluesky announcement for LiveStash, a new library by SoftwareMansion that fixes the problem of losing state on LiveView reconnects.
• https://github.com/software-mansion-labs/live-stash – LiveStash provides a reliable, explicit API to safely stash and recover Phoenix LiveView assigns, keeping application state intact whenever a socket connection is interrupted or re-established.
• https://elixirconf.com/ – José Valim joined to highlight ElixirConf US. Training is Sept 9, with the conference Sept 10-11 in Chicago and virtual. The Call for Talks deadline is approaching.

Do you have some Elixir news to share? Tell us at @ThinkingElixir or email at show@thinkingelixir.com

Find us online

• Message the show - Bluesky
• Message the show - X
• Message the show on Fediverse - @ThinkingElixir@genserver.social
• Email the show - show@thinkingelixir.com
• Mark Ericksen on X - @brainlid
• Mark Ericksen on Bluesky - @brainlid.bsky.social
• Mark Ericksen on Fediverse - @brainlid@genserver.social
• David Bernheisel on Bluesky - @david.bernheisel.com
• David Bernheisel on Fediverse - @dbern@genserver.social

Sponsored By:

• Paraxial.io: Paraxial.io is sponsoring today's show! Sign up for a free trial of Paraxial.io today and mention Thinking Elixir when you schedule a demo for a special offer.

Show Notes online - http://podcast.thinkingelixir.com/294

Elixir Community News

• https://paraxial.io/ – Paraxial.io is sponsoring today's show! Sign up for a free trial of Paraxial.io today and mention Thinking Elixir when you schedule a demo for a special offer.
• https://x.com/expert_lsp/status/2025624737737539876 – Announcement tweet for Expert LSP v0.1.0-rc.1, the unified Elixir Language Server combining Lexical and Next LS.
• https://x.com/mitchhanberg/status/2025625898322469367 – Mitch Hanberg's tweet about the Expert LSP v0.1.0-rc.1 release candidate.
• https://expert-lsp.org/the-first-release-candidate/ – Blog post accompanying the Expert LSP v0.1.0-rc.1 release, covering stability goals and the near-term roadmap.
• https://github.com/elixir-lang/expert – GitHub repository for Expert, the unified Elixir Language Server. Includes features like compiler diagnostics, completions, go-to-definition, monorepo support, and more.
• https://x.com/tylerayoung/status/2025659771789905966 – Tyler Young shares his team's experience using Expert at Jump, calling it the best Elixir LSP experience he's had.
• https://x.com/benoitc/status/2024059742096687482 – Benoît Chesneau announces the erlang-python package, enabling Python ML/AI integration with Erlang/Elixir concurrency.
• https://github.com/benoitc/erlang-python – GitHub repository for erlang-python, which lets you run Python code from Erlang or Elixir with true parallelism, async/await support, and seamless integration.
• https://x.com/josevalim/status/2024464732535521316 – José Valim announces that Livebook Desktop has been converted to Tauri, adding Linux support and plans to extract the Tauri integration as a reusable package.
• https://github.com/livebook-dev/livebook#desktop-app – Livebook Desktop nightly builds using the new Tauri-based app for Linux, macOS, and Windows.
• https://tauri.app/ – Homepage for Tauri, a cross-platform desktop app framework (Linux, Mac, Windows, Android, iOS) used to build Livebook Desktop.
• https://github.com/tauri-apps/tauri – GitHub repository for Tauri, the Rust-based framework now powering Livebook Desktop.
• https://x.com/josevalim/status/2024538544685851099 – José Valim shares a detailed update on Elixir v1.20 compile time improvements — ~10% faster on OTP 28, ~20% on OTP 29, and up to 5x faster with a new interpreted mode.
• https://github.com/josevalim/langcompilebench – Repository created by José Valim to benchmark and compare compilation times across BEAM languages (Elixir, Erlang, Gleam) with open, public measurements.
• https://github.com/elixir-lang/elixir/commit/c40c140e3f524fa8384efd33137ec1c3fab341d3 – Elixir commit that achieved a ~10% compile speed improvement by delaying module deletion, reducing single-core lock contention.
• https://github.com/erlang/otp/pull/10615 – Erlang/OTP PR that optimized module loading by reducing single-core lock usage, improving both compilation and boot times by ~10%.
• https://github.com/elixir-lang/elixir/pull/15087 – Elixir PR adding an interpreted mode to bypass code loading, resulting in up to 5x faster compile times on multi-core machines.
• https://x.com/josevalim/status/2025930710482120825 – José Valim announces an upcoming Elixir v1.20 improvement that drastically reduces incremental recompilation when struct fields are added or removed.
• https://x.com/polvalente/status/2024641604313571328 – Paulo Valente announces the release of Nx v0.11, with new features including faster evaluated mode, Nx.runtime_callback, sharding support, and MPS support in Torchx.
• https://hex.pm/packages/nx – Hex package page for Nx v0.11, Elixir's numerical computing library.
• https://hex.pm/packages/exla – Hex package page for EXLA v0.11, the XLA-based backend for Nx with faster build times and sharding support.
• https://hex.pm/packages/torchx – Hex package page for Torchx v0.11, the LibTorch backend for Nx now with MPS (Apple Silicon GPU) support.
• https://github.com/elixir-nx/nx – Monorepo for the Nx ecosystem, containing Nx, EXLA, and Torchx packages.
• https://github.com/ash-project/usage_rules – The usage_rules package reached v1.0 and beyond (now at v1.2.1). It synchronizes LLM rules files with your dependencies and is independent of Ash.
• https://bsky.app/profile/tylerayoung.com/post/3mfcfrhsios2a – Tyler Young shares a doctest quick tip — you can omit the result line in an Elixir doctest and use pattern matching with the iex line continuation syntax instead.
• https://x.com/jeffreyguenther/status/2026308201025785940 – Announcement tweet for Courgette, a new declarative TUI (Terminal User Interface) framework for Elixir built on OTP.
• https://github.com/LoamStudios/courgette – GitHub repository for Courgette, a LiveView-inspired TUI framework for Elixir featuring a Flexbox layout engine, stateful components, incremental rendering at ~60 FPS, and zero dependencies.
• https://github.com/Gazler/breeze – Breeze, another Elixir TUI framework that Courgette resembles in approach.
• https://en.wikipedia.org/wiki/Kitty_(terminal_emulator) – Wikipedia page for the Kitty terminal emulator, whose keyboard protocol is supported by Courgette for full keyboard input handling.

Do you have some Elixir news to share? Tell us at @ThinkingElixir or email at show@thinkingelixir.com

Find us online

• Message the show - Bluesky
• Message the show - X
• Message the show on Fediverse - @ThinkingElixir@genserver.social
• Email the show - show@thinkingelixir.com
• Mark Ericksen on X - @brainlid
• Mark Ericksen on Bluesky - @brainlid.bsky.social
• Mark Ericksen on Fediverse - @brainlid@genserver.social
• David Bernheisel on Bluesky - @david.bernheisel.com
• David Bernheisel on Fediverse - @dbern@genserver.social

Sponsored By:

• Paraxial.io: Paraxial.io is sponsoring today's show! Sign up for a free trial of Paraxial.io today and mention Thinking Elixir when you schedule a demo for a special offer.

Show Notes online - http://podcast.thinkingelixir.com/201

Elixir Community News

• https://github.com/lexical-lsp/lexical/releases/tag/v0.6.0 – Lexical 0.6.0 release includes document and workspace symbols, improved Phoenix controller completions, and enhanced indexing performance.
• https://benreinhart.com/blog/verifying-slack-requests-elixir-phoenix/ – Ben Reinhart's blog post details the process for cryptographically verifying event notifications from Slack in Phoenix apps for Slack bots.
• https://twitter.com/PJUllrich/status/1784707877157970387 – Peter Ulrich has launched a LiveView-oriented course on building forms as announced on his Twitter account.
• https://indiecourses.com/catalog/building-forms-with-phoenix-liveview-2OPYIqaekkZwrpgLUZOyZV – The course covers building forms with Phoenix LiveView including various types of schema and dynamic fields.
• https://paraxial.io/blog/live-view-support – Michael Lubas outlines security-focused support for LiveView on Paraxial.io, including protection against initial connection and websocket spam.
• https://github.com/nccgroup/sobelow/pull/123 – There was work on adding support for HEEx to Sobelow.XSS.Raw, as a part of Sobelow's security-focused static analysis for the Phoenix Framework.
• https://twitter.com/sasajuric/status/1784958371998601526 – It's the 5 Year Anniversary of Saša Jurić's “Soul of Erlang and Elixir” talk, recommended for its lasting relevance in the development community.
• https://www.youtube.com/watch?v=JvBT4XBdoUE – Saša Jurić's influential “Soul of Erlang and Elixir” talk is still very relevant and worth watching, even five years later.
• https://www.elixirconf.eu/ – ElixirConf EU 2025 dates and location have been announced, with a waitlist available for those interested in attending.
• https://www.ftc.gov/news-events/news/press-releases/2024/04/ftc-announces-rule-banning-noncompetes – The FTC ruling banning non-compete clauses aims to increase wages, entrepreneurship, and overall economic dynamism in the US technology sector.
• While bans on non-compete clauses for technology workers are in effect, trade secret laws and NDAs continue to provide employers with protection against information leaks.

Do you have some Elixir news to share? Tell us at @ThinkingElixir or email at show@thinkingelixir.com

Find us online

• Message the show - @ThinkingElixir
• Message the show on Fediverse - @ThinkingElixir@genserver.social
• Email the show - show@thinkingelixir.com
• Mark Ericksen - @brainlid
• Mark Ericksen on Fediverse - @brainlid@genserver.social
• David Bernheisel - @bernheisel
• David Bernheisel on Fediverse - @dbern@genserver.social

Sponsored By:

• Fly.io: Fly.io is a great place to deploy your next Phoenix application! Check them out!

Show Notes online - http://podcast.thinkingelixir.com/153

Elixir Community News

• https://github.com/elixir-lang/elixir/releases/tag/v1.15.0-rc.0 – Elixir 1.15-rc.0
• https://groups.google.com/g/elixir-lang-core/c/CjY7W9xvu80 – Proposal for adding URI sigil
• https://groups.google.com/g/elixir-lang-core/c/MfB7GJSXV5w – Proposal for adding UTC sigil
• https://podcast.thinkingelixir.com/149 – More on Logging from Łukasz Niemier
• https://twitter.com/ac_alejos/status/1658943203364544512 – Exgboost library released
• https://github.com/acalejos/exgboost/blob/main/notebooks/iris_classification.livemd – Livebook example for Exgboost
• https://www.youtube.com/watch?v=cG8iwK_6KIg – ElixirConf EU Lightning Talk that visualizes supervisor behaviors using the classic computer game Doom with monster spawning and killing.
• https://github.com/amalbuquerque/doom-supervisor – Github project for DoomSupervisor
• http://twitch.com/josevalim – José Valim has resumed some Live coding and chatting on Twitch.
• https://twitter.com/josevalim/status/1660300292619923457 – José sharing on Twitter that a Twitch Livestream will start

Do you have some Elixir news to share? Tell us at @ThinkingElixir or email at show@thinkingelixir.com

Discussion Resources

• https://github.com/elixir-tools/credo-language-server – LSP implementation for Credo
• https://github.com/elixir-tools/gen_lsp – A behavior for creating language servers
• https://github.com/elixir-tools – Githug organization
• https://simplebet.io/index.html
• https://github.com/elixir-lsp/elixir-ls
• https://twitter.com/mitchhanberg/status/1648327430912843779
• https://www.mitchellhanberg.com/credo-language-server-and-the-birth-of-elixir-tools/ – Blog post about the Credo Language Server and Elixir Tools
• https://podcast.thinkingelixir.com/92 – Previous interview about Temple (March 29th, 2022)
• https://microsoft.github.io/language-server-protocol/specifications/lsp/3.17/specification/ – Language Server spec from Microsoft
• https://www.youtube.com/watch?v=Ug-SEozyG1A – Code BEAM talk - "OTP Process Abstractions with proc lib"
• https://github.com/adobe/elixir-styler – Formatter plugin from Adobe
• https://github.com/tree-sitter/tree-sitter
• https://github.com/elixir-toniq/norm
• https://github.com/mhanberg/temple
• https://github.com/petalframework/petal_components

Guest Information

• https://twitter.com/mitchhanberg – on Twitter
• https://github.com/mhanberg/ – on Github
• https://hachyderm.io/@mitchhanberg – on Fediverse
• https://www.mitchellhanberg.com/ – Blog
• https://champions-of-hope.funraise.org/fundraiser/mitchell-hanberg – Fund raising page for FightCRC

Find us online

• Message the show - @ThinkingElixir
• Message the show on Fediverse - @ThinkingElixir@genserver.social
• Email the show - show@thinkingelixir.com
• Mark Ericksen - @brainlid
• Mark Ericksen on Fediverse - @brainlid@genserver.social
• David Bernheisel - @bernheisel
• David Bernheisel on Fediverse - @dbern@genserver.social
• Cade Ward - @cadebward
• Cade Ward on Fediverse - @cadebward@genserver.social

Sponsored By:

• Fly.io: Fly.io is a great place to deploy your next Phoenix application! Check them out!