Security: Do not install OpenAI Atlas, Perplexity Comet, etc At least until the security implications are more fully understood Multiple security research firms have found vulnerabilities in AI browser architecture, not restricted to only one specific browser brave.com/blog/unseeab...

npx-safe by @rafaelgss.dev : Use the Node.js permissions model to make running npx on untrusted packages safer 🔥 github.com/RafaelGSS/do...

Node.js 25 is here! We have upgraded V8 to 14.1, bringing major JSON.stringify performance improvements and JIT pipeline optimizations. This release introduces the permission model --allow-net, Web Storage is enabled by default, and more! nodejs.org/en/blog/rele...

Ahh version control conflicts are a great use case for AI - conflicts can be super hairy, so any tools or context that can help with this is 🔥🔥

A phishing attack is going on against maintainers on @npmjs.bsky.social, be aware! - email is spoofed from npmjs.org (which doesn’t use DMARC but redirects to npmjs.com) - login link points to npnjs(dot)com (clear giveaway)

My request for Dependabot: Full support for @pnpm.io (updates to transitive deps fail currently) Voice support in the issue 🙌 github.com/dependabot/d...

Safari 26 is here!!! Anchor Positioning, Scroll-driven animations, High Dynamic Range images, the new HTML <model> element, the all-new Digital Credentials API, SVG icon support, WebGPU, WebKit in SwiftUI, every site can be a web app on iOS and iPadOS, and much more. webkit.org/blog/17333/w...

React Advanced meetup coming Toronto 🇨🇦 Any speakers interested: apply to the CFP at the link below 🙌

Codemods for Node.js 😍 Looking great, thanks to all contributors!

@netlify.com multiple users reporting Netlify edge functions being down, in case you didn't know yet Maybe you can update the status page with the outage? answers.netlify.com/t/the-site-s...

VS Code 1.103 (Jul 2025) finally has expandable hovers in JavaScript and TypeScript 😍 for when the hover info is showing the type name instead of the object / array / etc code.visualstudio.com/updates/v1_1...

Is more funding possible for open source maintainers in Europe? 🇪🇺 A new study commissioned by GitHub explores why creating an EU Sovereign Tech Fund could provide sustainable resources for critical OS projects. Learn how you can help make it a reality.👇 github.blog/open-source/...

I made an emoji picker for Mac! Fun,but also rather frustrating experience 🙃 Swift was my third choice after 2 attempts with rust GUIs github.com/mikkelam/Emo...

@bengubler.com Welcome to Bluesky! 🎉 Thanks for your work on the new `experimental.typedRoutes` Next.js Turbopack feature! bsky.app/profile/did:...

Looks like `experimental.typedRoutes` is coming to Next.js Turbopack, thanks to Ben Gubler 🚀 🎉 github.com/vercel/next....

SVG filters provide a basic lighting system you can sync with a little JavaScript and use in your web apps 💡 ... not as powerful as MacOS implementation but pretty cool

React Compiler RC is now available! We've added support for swc and are working towards a stable release react.dev/blog/2025/04...

With the next TC39 plenary less than a week away, Igalia’s Compilers team has just dropped a thorough blog post recapping April’s session. It walks through the standout proposals and discussions that will help steer JavaScript’s evolution in the months ahead. blogs.igalia.com/compilers/20...

My work in open source, from fixing papercuts to support students to discussing standards 🚀 Thanks so much to the Open Source Initiative @opensource.org for featuring me as a maintainer for Maintainer Month 2025! opensource.org/maintainers/...

What if you took the core abstractions of Plan 9 from Bell Labs and put them in a WebAssembly module? progrium.xyz/blog/2025/sp...

AI-generated image alt text in HTML and Markdown in VS Code April 2025 (1.100) 😍 code.visualstudio.com/updates/v1_1...

⚠️ Security release pre-alert: We will release new versions of v20.x, v22.x, v23.x, v24.x release lines on or shortly after May 14, 2025, in order to address: - 1 high severity issue - 1 moderate severity issue - 1 low severity issue Details: nodejs.org/en/blog/vuln...

ChatGPT Deep Research receives a GitHub "connector" 🎉 (not available yet in EEA, CH, UK) Lots of times I've seen ChatGPT unable to surface info from GitHub, so really looking forward to trying this! www.neowin.net/news/openai-...

Oh nice, looks like the 2019 idea I had to "skip parameters in function parameter lists" may come to life in @chronicles.org's proposal "void Discard Bindings for ECMAScript" 😍

Node.js 24 is here and it's looking good 😎🚀 Featuring updates to V8 v13.6, npm v11, improved Permission Model and more new features in the blog. Check it out and let us know what you think: hubs.ly/Q03lfLDC0

🔒Node.js v18 is End-of-Life next Wednesday Make sure you have upgraded to v20 or v22 👍

type.fn from ArkType looking great! Runtime type checking for function arg types 🚀

The best way to define types is with TypeScript syntax. But can a string-based API have native-quality DX? Find out in-browser with one click🛝⬇️

Native JSR support coming to @pnpm.io 👀🔥 github.com/pnpm/pnpm/pu...

Come and join us at the graduation event April 8 🚀

This reduced the size of minizlib from 3.9mb down to 397kb! It'll also lead to the `tar` package shrinking once that pulls the update in

Web Push is exciting. But it requires service workers and a bunch of custom code that can be different from project to project. How about instead we standardize on using JSON & leave JavaScript out of it! Meet Declarative Web Push. Available in iOS and iPadOS 18.4 beta. webkit.org/blog/16535/m...

It's happening! You'll soon be able to use the `browser` global to access extension APIs in Chrome: groups.google.com/a/chromium.o...

Proposal PR for Node.js v24.0.0 🚀 - npm v11 - V8 v13.4 - Undici v7 - Deprecation of url.parse() - use `new URL()` github.com/nodejs/node/...

GritQL Biome plugins looking great 🔥 More options for simpler linting plugins 👍 ESLint `no-restricted-syntax` is almost there, but esquery can get pretty verbose...

Node.js will no longer ship corepack starting from v25. This might make a lot of people sad, but it was a problem in terms of project maintainance. 🧵 github.com/nodejs/TSC/p...

Just wrapped up another pair programming session - the Pairamid Scheme continues! 🔺 I've been running an experiment where I put my calendar on the internet and pair with complete strangers. It has gone MUCH better than I thought and it's been a real delight benholmen.com/blog/pairing...

node folks put a lot of energy to backport important features, so the ecosystem can move forward years in advance. It requires a ton of hard work that sometimes goes unnoticed. To everyone working on node, we appreciate your efforts 🙏

Come and join us for the special edition meetup with TC39 members 🚀 Mar 12 (tomorrow) @ JetBrains Amsterdam

whoa, unexpected! 🤯 Official Go rewrite of TypeScript

I setup my GitHub sponsors not long ago but didn't really mention it anywhere. If you appreciate what I do, these sponsorships do help a lot 🙏 My focus this year is all over like every year 😅 (e18e, chai, tinylibs, chokidar, vueuse, and much more). But I will keep on top of them all

Great to see another analysis tool JS/TS supply chain security space 🔥 Reproducibility sounds beneficial over existing provenance methods

I'm sure this is fine futurism.com/young-coders...

Join us at the next AmsterdamJS on Mar 6 🙌 Talks by @jakob.jingleheimer.dev, @metcoder.dev and Lars Straathof Hope to see you there!

The exciting future or Records & Tuples in JavaScript: github.com/tc39/proposa... * Now they're objects called Composites, instead * They're really just frozen Objects/Arrays! * Except with an extra bit for Map/Set key behavior * You need to call Composite.equals for comparison; === is by identity

It works! Beyond passkeys, I can encrypt a file in the browser with typage and WebAuthn, and then decrypt it with the same YubiKey from the CLI with age-plugin-fido2prf. README: github.com/FiloSottile/ty… PR: github.com/FiloSottile/ty…

🚀 ESLint now officially supports linting CSS! Read more: eslint.org/blog/2025/02...

Join us at the next AmsterdamJS on Mar 6 🙌 Hope to see you there!

`Cannot find matching keyid` error with latest pnpm? Upgrade to Node.js v22.14.0, which updates to the fixed Corepack 0.31.0 version: Windows: choco upgrade nodejs # or nodejs-lts macOS: brew upgrade node # or node@22 Ubuntu: sudo apt-get --only-upgrade install nodejs

Amsterdam: Learning to code as a woman, non-binary, LGBTQ+ member, or a part of another underrepresented minority group? Join us in a safe environment at @bluehire.nl 👉 Feb 12 (18:30 - 20:30) Hope to see you there!