delighted to see vite is being solidly backed 🙌 ensuring the sustainability of key open source projects is essential for the web ❤️ btw, this (i think!) makes nuxt the first framework to have team members from both @vercel.com and @cloudflare.social here’s to the joy of building together! 🍻

VoidZero, the team behind Vite, Vitest, Rolldown, Oxc, and Vite+, is joining Cloudflare. Vite stays open source, vendor-agnostic, and built for everyone. https://cfl.re/4dR0LYA

We've been working with folks from Cloudflare for a long time, and I've seen how important Vite is to them. It's telling that their first move is a $1M fund for maintainers in the ecosystem. Together with Vite's OC funds, this is a ton of support for independent devs. Massive waves ahead.

After the big announcement, I'll be live at @frontendnation.com to talk about Vite+ (and why you all should use it!). One config to rule them all 👀 vi.to/hubs/fronten...

`vp run merge`

We've published a Browser Mode security advisory. CDP-capable providers like Playwright Chromium with the browser API exposed to the network allowed attackers to run code on the host. Update vitest/browser to 5.0.0-beta.4, 4.1.8, or 3.2.6. Vite+ users: Upgrade to 0.1.24 github.com/vitest-dev/v...

We've published two Windows-related security advisories: ◇ If Vite runs with `--host`, denied files may have been reachable over the network. ◇ launch-editor with NTLM enabled may leak NTLMv2 hashes via a malicious page. Update to Vite 8.0.16/7.3.5/6.4.3, Vite+ 0.1.24, and launch-editor 2.14.1.

New on @npmx.dev: 🥇🥈🥉 npmx.dev/leaderboard/... Why? Honestly, because we can just do fun things on the web. 🍿 Will the crown get to @rich-harris.dev's head? Will @danielroe.dev point out that ackshually SvelteKit is a fairer comparison and look how low the poor thing is? Will Astronauts organize?

💯 Oh wow, great job @voidzero.dev on this new(?) page: oxc.rs/compatibilit.... Until now it was a pain to find the current status for any given combo at any given time. 💡 Here's a free idea: let me click a cell in this table to subscribe to updates and send me an email when that status changes.

Really had a blast at the first ever Laravel Live JP this year 🎉 Besides giving my talk about Vite+ (which you all should use!) I had the chance to be part of the @laravel.com x @voidzero.dev panel. A lot of memories were made with new friends and familiar faces 🙌🏻

Wanna follow the ZurichJS crew and our awesome lineup? We made a starter pack for that: go.bsky.app/R5bfzC8

Rolldown is now available as Rust crate and will be published continuously there in addition to npm. crates.io/crates/rolld...

the replacements.fyi site now lets you drop a package.json into it to see which dependencies can be replaced with native functionality, or more performant choices 🎉

🙋‍♂️ do I know any oss friends who are facing unwelcome LLM-generated PRs or comments? .... want to fight back?

💥 just released a github action: `uppt` it aims to be a very simple, secure release workflow for maintainers that adheres to best security practices ⚪ trusted, staged publishing on npmjs.com ⚪ github environment protection ⚪ generated release PR + changelog ⚪ automatic release + publish on merge ✨

OSS burnout claims another project. On 2 Apr, an entitled user angrily asked the burned-out maintainer of nvim-treesitter to “go switch to something that doesn't require interacting with people”. The maintainer replied “OK” — and archived the repo, stopping development of nvim-treesitter.

I am having to honor to join this weeks 114th @tc39.es meeting as observer! 🎉

A well-written bug report is worth so much more than a drive-by PR with a "solution". Showing us maintainers how to reproduce it is often the real work and improves debugging your skills!

🪩🕺💃 @vite.dev

🚨 Security release: we've released Nuxt 4.4.6 and 3.21.6, which patch four advisories: - `navigateTo` XSS - webpack/rspack dev-server source disclosure - `.server.vue` page middleware bypass - island cache-poisoning Thank you to the reporters. 💚 👉 check github.com/nuxt/nuxt/s... for more details

Speeding up the JS ecosystem OXC edition 🚀 We made both oxfmt and oxlint 50% faster on projects with >50k directories. marvinh.dev/blog/speedin...

Couldn't keep up with all the news? We got some selected highlight from last month to recap! 🌀 → Vite Plus lazyPlugins API → @vitest.dev 5 sneak peak → Oxlint: RFC for linting Svelte/Vue/Angular templates → Module Federation in @vite.dev via plugin → @npmx.dev vp option youtu.be/zwY4UZr-qjc

we recently added rule timing support to oxlint to help triage performance issues. try running with `--debug=timings` to see the slowest built-in rules. support for type-aware/JS plugins will be supported in the future too.

Open source maintainers at profitable companies: stop asking permission to fix what your employer already depends on. No paperwork. No programme. No manager’s blessing. Just maintain it on the clock.

most of these github actions driven breaches are because of pull_request_target. here's some tips of what to look for when reviewing your own workflows. worth noting - it is safe, and necessary, when used correctly 🧵

Yes! @svelte.dev goes from 🔴 -> 💚 on the Oxfmt side 🔥 You can now format your Svelte components with Oxfmt too. See oxc.rs/docs/guide/u... for more details

New feature on @npmx.dev 🎉 The timeline tab now comes with a chart, so it is easier to see the evolution of the package size and its dependencies. The positive and warning events queried from @e18e.dev are great to check the package health ❤️

🚀 tsdown v0.22 is out, now powered by Rolldown 1.0.0! What’s new: ✦ Upgraded to Rolldown v1.0.0 ✦ Reduced install size by 1.33 MB ✦ Auto-detects the `bin` field ✦ Dropped support for Node.js 20, 21, and 23 ✦ `dts` is now inferred from `compilerOptions.declaration` github.com/rolldown/tsd...

Congrats to the whole @rolldown.rs team to the 1.0 achievement 🎉 It has been a wild ride and we aren't stopping yet! Full (Bundle Mode) ahead 👀

For nearly 10 years, our community has been helping build Nuxt through contributions, feedback, and pull requests. We just updated the Nuxters scoring to better recognize PR contributions with a more granular approach. Check it out on nuxters.nuxt.com 💚

Tales from the Void: April 2026 is out! ✨ This month at VoidZero: ◇ Our approach to supply chain security & trusted publishing ◇ A new Oxc-based Angular Compiler that is up 20x faster ◇ Vite+ `lazyPlugin` to reduce slowdowns ◇ @vitest.dev Browser Mode trace viewer ◇ @rolldown.rs module tags

@vitest.dev is going framework agnostic, and we need your feedback!

Golfing the byte size of application is so 2025, I've pivoted into golfing tokens github.com/oxc-project/...

As we're getting close to the full lineup, we've just released two more speaker profiles on our website! While a bit hard to guess from an outline, we're still curious if you can guess without peeking at the website 👀

@vite.dev would not be the same without @sapphi.red Thank you so much for your incredible work over 4 years Sapphi!

I have now replaced ESLint with Oxlint in the DebtBook Rails/React codebase 🫡 ESLint ran in 20s with full cache, 230s without cache. And somewhere in between very randomly depending on the changes made. Oxlint - with type-aware, a JS Plugin, and more than 250 rules - runs in around 8 seconds :)

Did you know you can use most ESLint plugins with Oxlint? That also includes the @react.dev compiler rules 🎉 More info about JS Plugin support in the blog post & docs oxc.rs/blog/2026-03...

TSRX now supports Vue Vapor! Plus we've extended the runtimes support to include Preact. We will soon have an MCP server for TSRX so you can plug it into your favorite AI agent. TSRX is still alpha, so we're looking for early feedback from the Vue community tsrx.dev/getting-star...

Oxfmt can now format your JSDoc as well! 👀 All you need is setting the `jsdoc` option in your Oxfmt config file, either as default empty object or with custom options. More info in our Oxfmt docs oxc.rs/docs/guide/u...

I don't think tech at large understands how hard it is to be an open source maintainer right now. So many great folks are on the brink of burnout. Funding is drying out. We live in a security minefield. Companies think humans are disposable. If you're a maintainer, we care. You deserve the world.

I was debugging some chunking regressions in an app I work on when updating from Vite 7 to Vite 8. I got an AI to generate a tool to help figuring out what was wrong, and I uploaded it at nicolo-ribaudo.github.io/vite-compare/ in case it's useful for anybody else.

Want to get involved with @e18e.dev and unsure where to start? Our Framework tracker project is developing a comparison tool for meta-frameworks. We have a great list of good first issues to get stuck into. github.com/e18e/framewo...

Did you know that the latest version of @vite.dev's @react.dev plugin comes without Babel? Less dependencies as Oxc is taking over these transforms since Vite 8. 🎉 If you wonder how the React Compiler works then, no worries, there is a preset for it adding Babel back.

Starting in 8 minutes! Come around, ask questions about @typescriptlang.org and what @jakebailey.dev (the real one!) is up to. 👀 Link to the stream: youtube.com/live/Nyt5YyO...

this is today! come hang out and see us joke about Alex getting Jake's name wrong 😂 i'll also be dropping by to share what's new in e18e lately

AI now writes 127% of my code. Here's what I learned.

i noticed in @npmx.dev we have a lot of warning-level notices but few "success" notices so far - so i've added a celebration message for when a package gets smaller! (coming in the next release) 🎉

Vite+ shipped under MIT! 🎉 And the unified frontend toolchain now also has Bun support as package manager, in addition to existing @pnpm.io, @yarnpkg.dev, and npm support.

ICYMI: Last month, @evanyou.me announced Void 👀 Time to join the waitlist if you haven't yet. PS: Which Void feature are you most excited about? void.cloud

80k GitHub stars! 🌟