Storybook 10 is here! ✂️ ESM-only (the only breaking change!) 🧩 Module automocking for easier testing 🏭 Typesafe CSF factories Preview for React 💫 UI editing and sharing optimizations 🏷️ Tag filtering exclusion for sidebar management 🔀 Svelte async component support

here's what the @e18e.dev community has been upto for the last couple of months! huge thanks to everyone involved 🎉 much more to come very soon, and we have a roadmap of some super useful tools in the works

If you have a codebase that uses an older version of Node.js, we have started to put together articles and tools to help you migrate your code. nodejs.org/en/learn/get... nodejs.org/en/blog/migr...

🧹 Time to clean up! unjs/ofetch ($fetch) v2 (alpha) - 🌐 ESM-only + Native Web APIs - 📦 Zero deps (3 → 0) - 📉 Install: 900 KB → 28 KB - ⚡️Bundle: 17.4 KB (6.5 KB gz) → 6.3 KB (2.4 KB gz) More optimizations to come 🤞

🪝 Hookable powers Nuxt & Nitro hooks — every build, request, and render calls it. 🔥 v6.x (rc): 20–35× faster and 79% smaller (−2.26 KB) (with HookableCore) Thanks @negezor for the perf magic ✨

awesome to see @vitest.dev 4 running latest chai! chai 6 more than halved package size compared to 5 🎉

new version of the @e18e.dev GitHub action! now gives you a nicer table of duplicate dependencies so you can see what is pulling them in

when you want to `open` something (like the MacOS `open`), you don't need a 9 dependency package, you can use tiny-open instead! and if you do want the browser launching stuff, you can use tiny-browser-open: github.com/fabiospampin...

Revision 684: Ecosystem Performance (@e18e.dev) workingdraft.de/684/ mit @thealexlichter.com und Ulrich-Matthias „Ulima“ Schäfer. Diese Revision wird gesponsert von @europdf.eu ✨ , eurem SaaS zur Erzeugung hochwertiger, barrierefreier PDFs mit Hilfe modernem HTML/CSS/JS – und mit Sitz in der EU 🇪🇺

you can sponsor @e18e.dev through GitHub Sponsors or OpenCollective these funds will primarily be used for two things: - distributed to projects/individuals in the wider JS community - development of community projects/tools thanks so much to those of you who already sponsor us 💙

svelte.dev/packages is now live! It's a convenient and easily discoverable place to find a sampling of high quality packages in the ecosystem. We hope it will give confidence in the Svelte ecosystem to newcomers and help them get started more easily.

we now have some new @e18e.dev docs on best practice of publishing npm packages this documents the recommended basics for a secure publish workflow and gives some pointers for further security/tools/etc this is a _very_ opinionated subject, so do ping me if you have feedback!

`@bluwy/giget-core` is now back to a small 90kB install size thanks to @ayuhito.com's `modern-tar` package! Perf is also slightly faster.

I think I just made Lit SSR 18x faster!

we now have an @e18e.dev github action which can diff your dependencies in PRs things like: - change in trust level (loss of trusted publisher) - adding >threshold dependencies - adding >threshold install size - bundle size difference (vs main) - duplicate deps early days so please give feedback!

Come hang out! 🙌

Some libraries publish sourcemaps with "sources" pointing back to the original but unpublished src files, making it harder to trace errors as the files aren't there to be inspected. I wrote a script to identify those! > npx renoma --filter-rules "renoma/no-missing-sourcemap-sources"

we're working on a new @e18e.dev CLI to help you setup secure publish workflows this won't be perfectly secure but its a good start! also recommend not clicking links in emails 👀

svelte-check is now much faster for all Svelte users!!! 33% faster in this real world test case!!! Thanks @43081j.com for all your efforts to speed up Svelte as part of improving the JS ecosystem via @e18e.dev!

In tomorrow's episode of This Week in Svelte @benmccann.com will join @paolo.ricciuti.me to talk about the recent NPM supply chain attack and e18e.dev. Watch the stream here: www.youtube.com/live/sTepLQw...

The next version of Storybook will only have one significant breaking change: Storybook 10 is ESM-only.

NPM supports switching from Authenticator App (TOTP) based 2FA to more phishing resistant WebAuthn based 2FA. Adding a WebAuthn security key and disabling the Authenticator App is a pretty quick process. For example Apple Touch ID & Windows Hello work! Physical keys work too, but aren't required.

some thoughts about the bloat introduced by edge-case first libraries

1. Never manually enter your GitHub or npm password; use a Passkey instead. 2. Enable npm 2FA for both authorization and publishing. 3. Use trusted publishing and remove all npm CI tokens. 4. Only invite maintainers who follow these security practices.

also fun metrics from today's compromise 73 million downloads a week of 9 lines of code to check if something is an array ah and its 54KB because a yarn error log was accidentally published in the package 7 years ago

@e18e.dev is so important

tinyglobby is such a good success story. It has replaced many libraries with something faster, smaller and more modern @superchupu.dev has done excellent work here, and @benmccann.com has driven adoption so well Cherry on top is that much of this happened inside @e18e.dev 🩵

we've just launched the replacements docs on the @e18e.dev site! this is part of a wider effort to document how to make your projects more performant. for now, just the replacements - but in future, perf tips and much more 🎉 all feedback much appreciated! ❤️

Vue Router was already light, but the upcoming custom resolver is on another level That's 40% size reduction 🤯

✂️ Knip v5.63.0 is out → New & improved plugins → Extended config hints → Tons of fixes all over the place Thanks to everyone involved! ❤️ Knip: knip.dev Changelog: github.com/webpro-nl/kn...

we now have an @e18e.dev github sponsors page! this community has helped so widely across the ecosystem - the prettier cli, esm migration, storybook/netlify/etc size reduction, and much more sponsorships will help support the people doing all of this work ❤️

Did a little morning @e18e.dev cleanup and raised a few PRs 🧹: - multer 👉 drop mkdirp dependency - test-exclude (Vitest dep) 👉 replace glob/minimatch with tinyglobby/micromatch - raw-body & @parse/node-apn 👉 loosen dep ranges - socks 👉 bump ip-address to v10

`JSON.stringify()` is going to be fast in V8 13.8 v8.dev/blog/json-st...

published `fast-wrap-ansi` which is ~10x faster than wrap-ansi and half as big! big thanks to Fabio for `fast-string-width` which this builds on, too ❤️

a common thing i've run into this week: packages which exhaustively try to cover every possible edge case. but it turns out almost no consumer calls it in a way that would hit those cases some are 1/4 of the size when you cut those out. sometimes its ok to just... not support things

just a reminder that you can sponsor @e18e.dev on OpenCollective. these funds will go towards the people contributing in this space, and events to knowledge share this stuff. big thanks to people who already sponsored. every little counts

today's @e18e.dev replacement tips ⚡ - strip-ansi -> stripVTControlCharacters (built in!) - cpy -> fs.cp (with recursive: true, built in!) - map-obj -> Object.fromEntries(Object.entries(obj).map(fn)) - filter-obj -> Object.fromEntries(Object.entries(obj).filter(fn)) - chalk -> styleText (built in!)

just some of the highlights of the great work the @e18e.dev community has been doing in the last few months. awesome work by everyone involved, and big thanks to all the maintainers who collaborated ❤️

We've added a lot of features, and a bit of bloat, over the years. Storybook 9 addressed that concern by removing complexity and reducing the size by half. 🗜️ Cut install size by over 50% 🧹 Overhaul internal dependency structure 📦 Move key addons into core 🪶 Support dev-only “minimal” install

Some of the benefit of reducing bundle size is also that it usually leads to better practices. So even in a backend service that doesn't care as much about size, it's worth keeping the cleanliness and conciseness up

was good fun being on the @storybook.js.org webinar today! thanks for having me along 💙 anyone who joined, you can find all the tools i mentioned here

This week I'm chatting with @43081j.com from @e18e.dev about how we reduced the bundle size in @storybook.js.org 9, and what we learned from it! 🤩 Come join us! It will be live, it will be fun, and there will be plenty of time for Q&A with the audience. 💬 us02web.zoom.us/webinar/regi...

Come check it out 🙌 storybook has done some great work, looking forward to chatting about it

npmgraph will soon be able to list suggestions from the @e18e.dev community 🎉 this'll be great for helping maintainers keep an eye on their dependency trees!

this month we started work on the @e18e.dev CLI! if you have any ideas or want to try it out during pre-release, come join us in the Discord 🎉 the vision is that we'll be able to lint dependency trees, publishing, and hopefully automate fixes (incl migrations!)

The @e18e.dev community are the unseen heroes of JS world. They jump into popular tools, speed them up and reduce dependencies. For example, they made Prettier CLI 2x faster. e18e.dev/blog/prettie... If you’re looking for someone to donate to, consider them! opencollective.com/e18e

huge thanks to @joshuakgoldberg.com , we now have an advocacy guide on @e18e.dev! this is great guidance since its not always clear how we should approach contributions, investigations, etc

We've been working hard at getting the new prettier cli released for some months now, and here it is! Huge speed ups and such a great collab between @e18e.dev and the prettier team 🩵 big thanks to @fabiospampinato.bsky.social leading this!

another day another ESM migration 😅