I keep coming back to this one post in my draft folder that's more about the zen of coding, simple code, how it relates to performance, how performance is not exclusive to code and more stuff like that. I'm not sure if this is something that would be interesting to read about.

My favorite food place in my city just closed down :(

I hope that the upcoming full bundle mode in rolldown will allow us to ditch optimizeDeps in vite. Would make so many things simpler! I'm eagerly awaiting to give the full bundle mode a go once it's out.

This is such a good approach towards tracing of running applications! I always look forward to new go blog posts.

Making chains of middlewares type-safe seems to require a bit of dancing around with types. See github.com/microsoft/Ty...

Unwritten rule: Deep technical programming topics 🤝 Blog with barely any CSS

Not sure what's been happening to the NPM downloads of Preact but we've been going parabolic these past few weeks. I know that downloads don't indicate much but always fun to look at a project you've been working on for 7 years gain popularity npmtrends.com/@angular/cor...

I'm not sure if vite is ready for 2026. The internals seem to be tailored for SPAs whereas frameworks of today need more of a general purpose asset transformer across multiple environments. - no non-js modules - no dynamic entry points - constant plugin if(dev) branching - no ssr css modules

More boring software 👍

pnpm v10.16.0 adds "minimumReleaseAge", a setting for defining how long a version has to have been published before pnpm will install it. A nice countermeasure against accidental installs of short-lived compromised packages before they get taken down. Not a 100% fix, but a great additional step!

I feel like these days framework authors spend more time trying to get tools to work together rather than spending time in their framework. As great as tools are for end users, there's a pile of patchwork and hacks for framework authors :S I've been wrestling with vite issues all week...

The missing link in JavaScript tooling Some thoughts on the fractured nature of our tools how we could unify them all. I feel like this would remove many barriers framework devs run into. marvinh.dev/blog/unifyin...

second: devs tend to fixate on repetitiveness as a sign of poor code quality. but the cure is often worse than the disease, because if unchecked it leads to the thing that, in my experience, really _is_ a sign of poor code quality: indirection. when you're writing code, indirection is your nemesis.

Recommend to read this. Great post about the culture around dependencies and the effects on code bases

NPM supports switching from Authenticator App (TOTP) based 2FA to more phishing resistant WebAuthn based 2FA. Adding a WebAuthn security key and disabling the Authenticator App is a pretty quick process. For example Apple Touch ID & Windows Hello work! Physical keys work too, but aren't required.

🚨 Breaking: npm author Qix compromised. Malicious package versions published in projects that typically see hundreds of millions of downloads each week. Details: socket.dev/blog/npm-aut...

Been looking at bundling server side apps for an easy 10x improvement in cold start times. I'm realizing again how big of a problem commonjs still is. So many deps on the server can't be bundled. The `debug` module is one of them.

Fresh 2 has graduated to beta releases - essentially release candidates before a stable release. Fresh can now act as a Vite plugin, opening the door to HMR, faster boot times, and Cloudflare deployments. deno.com/blog/fresh-a...

I wish I had more time to be involved with JS tooling. There is so much room for improvement there that would push everything forward.

We're launching a GoFundMe to cover legal fees to #FreeJavaScript trademark from Oracle. We need to raise $200k to make full use of the discovery phase in the trademark cancelation petition. This is a critical step in protecting the JavaScript name for the whole community. 👉 javascript.tm

Setting custom `process.title` in Node takes around 10-20ms. Vitest used to do this for every isolated test file so that debugging test runner processes was a bit nicer experience. But it's not worth the performance hit.

Malicious versions of the nx package + some packages under the @nx/* scope were published to npm. The compromised versions scan the file system, search for credentials, and post them publicly to GitHub. www.aikido.dev/blog/popular...

@nicr.dev is there a way in Babel to detect if any transforms were made at all and potentially bypass the serializer? Asking mostly out of curiosity

I'm always thankful that Babel exists. To me it's the unsung hero of the JS ecosystem. It's so easy to prototype something quickly with it!

🤳 Over the weekend, I did some research. What are good, representative, real-world devices for performance testing in 2025? csswizardry.com/2025/08/low-...

comptime.ts enables compile-time evaluation of expressions marked with comptime 👉 comptime.js.org #typescript #webdev

I edited my Cross-Site Request Forgery countermeasures research into a stand-alone article, including recommendations reusable by other projects. tl;dr: no need for tokens or keys, modern browsers tell you if a request is cross-origin! words.filippo.io/csrf

The semver library used in npm, yarn and pnpm could be made 33x faster. Ran into that while wondering why running `npm install` takes so long on the Preact repo. marvinh.dev/blog/speedin...

🚴💨 The Fastest Site in the Tour de France Every bike brand claims to have the fastest bike, but who has the fastest site? csswizardry.com/2025/07/the-...

We're exploring better tree shaking strategies for future Rspack versions. Our team member @ahabhgk wrote a blog post comparing how webpack, Rspack, Turbopack, esbuild, and Rollup handle tree shaking: github.com/orgs/web-inf...

TIL: `path.relative()` can return absolute paths on windows. This is beyond cursed.

Wrote an article about how React Server Components integrate with a bundler. It's a deep dive into how code splitting works, how RSCs eliminate network waterfalls, how environment directives like "use client" work, CSS loading, etc. Check it out! devongovett.me/blog/parcel-...

There is no “most important element” in HTML. However, the H1 is more important than most of them. Today, I am giving away 50 premium H1s: library.hot.page/headings Hand crafted by artisans

Appreciate this observation by Jamie Brandon: "My experience of optimization never matches up to what I was taught or what I see online." www.scattered-thoughts.net/log/0053/

Simple live reload for developing static sites 👉 leanrada.com/notes/simple... This is live reload using 39 lines of client-side JS! It will work with _anything_ server-side. This pretty much eliminates the need for ANY dev-time dependencies in many of my side projects 🥳 #webdev #JavaScript

we should build tools that make it easier to write better code, not more

I'm really impressed by zig's plan for async/await. It finally solves the function coloring problem that's plagued other languages, including JS. gist.github.com/andrewrk/1ad...

Yesterday I was on the @learnwithjason.dev show, despite me not being great at ... speaking... 😅 I really enjoyed the explanations we got to especially the signals part youtu.be/6pBMaaX4jIg?...

Spent 7 years in the GraphQL ecosystem. Here's what we got wrong: ❌ POST'ing documents as default ❌ Selling "versionless" APIs as realistic ❌ Ignoring HTTP caching entirely ❌ Making it complex for beginners ✅ The tech is solid. The guidance needs work. www.jovidecroock.com/blog/graphql...

In this talk, I tell the story of how we're leveraging the Rust programming language to accelerate the Temporal implementation in V8. 🦀🦖

After a new wave of discussion about CustomEvent vs Event subclasses, I wrote a new blog post on the topic: TL;DR: Subclass Event instead of using CustomEvent 😎 justinfagnani.com/2025/06/25/s...

👀 Reading this proposal by @nomster.bsky.social github.com/WICG/proposa...

With the ever expanding capabilities of AI to bang out more and more code, I'm curious to see if the debugging abilities will grow in the same vein.

It's now open for everyone to try out 🎉

Got bundling JSR/Deno code with Rolldown working. This is using Rolldown's and Deno's crates respecting Deno's lockfile, config discovery, and resolution. Finally Deno's crates have been refactored enough for this to be feasible (~500 LOC). I'll update with more details later.

The next iteration of Deno Deploy is in early access and everyone can try it out. - run any framework - very fast builds - built in telemetry - ...and more

Signals now support new `watched` and `unwatched` options. You can consider watched a lazy subscription, when the signal is first accessed it will trigger. When the last subscription is removed, unwatched will trigger.

Introducing @preact/signals-utils and @preact/signals-react-utils - a collection of helpers that make working with signals easier! These utilities help you write cleaner, more declarative code while maintaining optimal performance.

Been playing around a lot with the canvas API lately for some visualizations. It takes a little to get used to as the thinking is a little different, but I'm really liking it. It's quite cool to throw a lot of data at it and barely see any perf impact.