Public list by ~javascriptweekly

Issue 785 - Cryptographically valid malware hits npm

Postmortem: TanStack npm supply-chain compromise | TanStack Blog

https://tanstack.com/blog/npm-supply-chain-compromise-postmortem

Anatomy of the TanStack npm Compromise — A new strain of the Shai-Hulud worm pushed malicious versions of TanStack packages to npm yesterday (containing a tripwire that would delete files if it detected token revocation), though it hit ~170 other packages too. Maintainer credentials weren’t stolen, with the attack instead chaining pull_request_target abuse, cache poisoning, and OIDC token theft from CI memory.

3 months ago

Announcing Rolldown 1.0

https://voidzero.dev/posts/announcing-rolldown-1-0

Announcing Rolldown 1.0: The High Performance JS Bundler — The Rust-based bundler built as the backbone for Vite 8 reaches a stable v1.0. You get huge performance gains, but with Rollup plugin API compatibility: it's 10–30x faster than Rollup, with early adopters reporting big drops in build time.

3 months ago

Learn JavaScript - 33 JavaScript Concepts

https://33jsconcepts.com/

33 JavaScript Concepts — What began life as a Medium article and turned into a popular GitHub repo is now a full site covering a wide array of JavaScript concepts, even going beyond the 33.

#javascript #js #learn javascript #javascript tutorial #javascript concepts #javascript fundamentals

3 months ago

9 Times the Web Platform Was Influenced by Libraries | Jad Joubran

https://jadjoubran.io/blog/web-platform-influenced-by-libraries

9 Times the Web Platform Was Influenced by JavaScript Libraries — How various libraries like Lodash, Dojo and jQuery often did the “R&D work in production” for various features that eventually ended up in browser APIs.

3 months ago

Introduction to Azure Copilot Agents - Training

https://fandf.co/4uA0QFv

Easy and Rapid Azure Migrations. Azure Copilot Migration Agent — Check out Microsoft’s Introduction to Azure Copilot Agents free learning module to learn more and try it yourself.

3 months ago

From React to native web with nanotags: a migration that saved 100 KB—Martian Chronicles, Evil Martians’ team blog

https://evilmartians.com/chronicles/from-react-to-native-web-with-nanotags-a-migration-that-saved-100kb

From React to Web Components: A Migration That Saved 100 KB — “How I migrated a site from React to native Web Components, why that worked better than I expected, and how the patterns I used along the way grew into a small library called nanotags.”

#react #astro.js #typescript #javascript #open source #performance

3 months ago

Why migrate to Valibot?

https://valibot.dev/blog/why-migrate-to-valibot/

Why Migrate to Valibot? — Valibot is a light, modular TypeScript schema validation library and an alternative to the likes of Zod. v1.4.0 just dropped, too.

3 months ago

zero-native | Desktop Apps with Zig + WebView

https://zero-native.dev/

zero-native: Build Desktop Apps with Zig + WebView — Vercel Labs’ entry into the Neutralinojs/Electron/Tauri space for building native HTML+JS desktop apps atop a Zig core and the system WebView or Chromium. There are examples covering how to build vanilla, React, Svelte, and Vue apps on it. GitHub repo.

3 months ago

Try Tiger Cloud Free: $1,000 Credit | Tiger Data

https://www.tigerdata.com/go/trial

That API Call Takes 3 Seconds. It's Not the Network — It's the analytics query behind it. TimescaleDB extends Postgres so queries stay fast at scale. $1000 credit to start.

3 months ago

Debugging Next.JS Best Practices: Logs and Tracing

https://sentry.io/resources/nextjs-may-workshop/

Stop Guessing Where Your Next.js App Broke [Workshop] — Learn to trace Next.js errors back to their source using logs and tracing. Free workshop, register today

4 months ago