ECMAScript.News

varlock

varlock: write .env files with type information and validate, generate types, etc.
varlock.dev

#ECMAScript #JavaScript

NPQ: open source CLI tool that audits and protects npm installs from malicious packages
www.trevorlasn.com/blog/npq-pro...

#ECMAScript #JavaScript

ESLint v9.32.0 released - ESLint - Pluggable JavaScript Linter A pluggable and configurable linter tool for identifying and reporting on patterns in JavaScript. Maintain your code quality with ease.

ESLint v9.32.0: rules updated for explicit resource management, and more
@humanwhocodes.com @eslint.org
eslint.org/blog/2025/07...

#ECMAScript #JavaScript

Extism: multi-language plugin system based on WebAssembly
extism.org

#ECMAScript #JavaScript

Celebrating 20 years of MDN | MDN Blog MDN turns 20! Let's look at how we started, how MDN became the most trusted resource for web developers, the impact it's had on the open web, and yes, there's cake, too.

Celebrating 20 years of MDN
@developer.mozilla.org
developer.mozilla.org/en-US/blog/m...

#ECMAScript #JavaScript

The many, many, many JavaScript runtimes of the last decade This last decade has seen an inundation of new JavaScript runtimes (and engines in equal measure), enabling us to run JavaScript in all manner of contexts...

The many, many, many JavaScript runtimes of the last decade
@shirakaba.bsky.social
buttondown.com/whatever_jam...

#ECMAScript #JavaScript

Minification doesnt matter much Years ago, I was staunchly in the “minify your code, even if you use gzip” camp. But these days, I’ve switched teams! I did some tests on the bundled version of Kelp UI. Unminifed: 58.2kb Minified: 4...

Minification doesn’t matter much (and has downsides) – thanks to gzip compression
@cferdinandi.bsky.social
gomakethings.com/minification...

#ECMAScript #JavaScript

es-toolkit A state-of-the-art, high-performance JavaScript utility library with a small bundle size and strong type annotations.

es-toolkit: utility library with Lodash compatibility layer
es-toolkit.dev

#ECMAScript #JavaScript

npm ‘is’ Package Hijacked in Expanding Supply Chain Attack -... The ongoing npm phishing campaign escalates as attackers hijack the popular 'is' package, embedding malware in multiple versions.

npm package `is` hijacked in expanding supply chain attack
@sarahgooding.bsky.social @socket.dev
socket.dev/blog/npm-is-...

#ECMAScript #JavaScript

npm 'accidentally' removes Stylus package, breaks builds and pipelines npm has taken down all versions of the Stylus library and replaced them with a "security holding" page, breaking pipelines and builds worldwide that rely on the package.

npm ‘accidentally’ removes Stylus package, breaks builds and pipelines
@axsharma.com ‪@bleepingcomputer.com‬
www.bleepingcomputer.com/news/securit...

#ECMAScript #JavaScript

Temporal: The Curious Incident of the Wrong Nighttime by Philip Chimento Speaker's involvement in Temporal proposal and TC39 meetings for JavaScript standardization. Date conversion challenges faced in development. Addressing time zone discrepancies with Temporal to preven...

Talk about the upcoming Temporal API by one of its creators
@ptomato.name @gitnation.bsky.social
gitnation.com/contents/tem...

#ECMAScript #JavaScript

Community Showcase (Q2 2025) An update on what the community has been up to in Q2 of 2025

Ecosystem Performance (e18e) community showcase: Prettier CLI, e18e CLI, ESM-only migration, and more
@e18e.dev
e18e.dev/blog/communi...

#ECMAScript #JavaScript

Release v0.25.7 · evanw/esbuild Parse and print JavaScript imports with an explicit phase (#4238) This release adds basic syntax support for the defer and source import phases in JavaScript: defer This is a stage 3 proposal for...

esbuild v0.25.7: `import defer`, `import source`, and more
@evanwallace.bsky.social
github.com/evanw/esbuil...

#ECMAScript #JavaScript

JavaScript Microtasks: A Comprehensive Guide and the Event Loop Master JavaScript's microtask queue and queueMicrotask() API to build more responsive web applications with optimized rendering and state management

JavaScript microtasks and the event loop
codedynasty.dev/posts/JavaSc...

#ECMAScript #JavaScript

Bun v1.2.19 Fixes 163 issues (addressing 1,043 👍). Introduces `bun install --linker=isolated` for pnpm-style isolated node_modules, `bun why` for dependency tree understanding, `bun pm pkg` commands for package.j...

Bun v1.2.19: pnpm-style node_modules, interactive dependency management, and more
@jarredsumner.com
bun.com/blog/bun-v1....

#ECMAScript #JavaScript

ream.js: functional datetime library with immutable data structures
www.npmjs.com/package/ream...

#ECMAScript #JavaScript

Linear Matching of JavaScript Regular Expressions | Proceedings of the ACM on Programming Languages Modern regex languages have strayed far from well-understood traditional regular expressions: they include features that fundamentally transform the matching problem. In exchange for these features, m...

Linear matching of JavaScript regular expressions
dl.acm.org/doi/10.1145/...

#ECMAScript #JavaScript

Dependency thoughts
@macwright.com
macwright.com/2025/07/20/d...

#ECMAScript #JavaScript

NIH Is Far Cheaper Than The Wrong Dependency Frivilous dependencies are the enemy of maintainability.

“Not invented here” (NIH) is far cheaper than the wrong dependency
lewiscampbell.tech/blog/250718....

#ECMAScript #JavaScript

Release pnpm 10.13 · pnpm/pnpm Minor Changes Added the possibility to load multiple pnpmfiles. The pnpmfile setting can now accept a list of pnpmfile locations #9702. pnpm will now automatically load the pnpmfile.cjs file fr...

pnpm 10.13: easier plugin installation, loading multiple pnpmfiles, and more
@pnpm.io
github.com/pnpm/pnpm/re...

#ECMAScript #JavaScript

Node.js — Node v24.4.0 (Current) Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.

Node.js v24.4.0 (current): fsPromises.mkdtempDisposable(), spawn() propagates permission flags, SQLite options per connection, and more
@nodejs.org
nodejs.org/en/blog/rele...

#ECMAScript #JavaScript

Managing the State of Your Promises With Promise.all, a bundle can be rejected due to one failed promise. Instead, use Promise.allSettled to manage the state of your promises.

Promise.all() vs. Promise.allSettled() in JavaScript
spin.atomicobject.com/managing-the...

#ECMAScript #JavaScript

ESLint v9.31.0 released - ESLint - Pluggable JavaScript Linter A pluggable and configurable linter tool for identifying and reporting on patterns in JavaScript. Maintain your code quality with ease.

ESLint v9.31.0: support for explicit resource management in core rules and more
@eslint.org
eslint.org/blog/2025/07...

#ECMAScript #JavaScript

Biome v2.1

Biome 2.1: faster scanner, improved type inference, new rules and more
@biomejs.dev
biomejs.dev/blog/biome-v...

#ECMAScript #JavaScript

Modern async iteration in JavaScript with Array.fromAsync() - Matt Smith JavaScript's 'Array.fromAsync()' offers a concise alternative to 'for await...of' when working with async iterables and streams.

Modern async iteration in JavaScript with Array.fromAsync()
allthingssmitty.com/2025/07/14/m...

#ECMAScript #JavaScript

Bundling JavaScript via scope hoisting is broken
@devongovett.bsky.social
devongovett.me/blog/scope-h...

#ECMAScript #JavaScript

Biome v2.1

Biome 2.1: faster scanner, improved type inference, new rules and more
@biomejs.dev
biomejs.dev/blog/biome-v...

#ECMAScript #JavaScript

When can I use Temporal? TC39 has had a Temporal API proposal in the works since 2017. It's currently at stage 3 (of 4). So this begs an obvious question... If Brendan Eich can invent all of JavaScript in 10 days, why has it ...

When can I use the JavaScript Temporal API?
computus.org/when-can-i-u...

#ECMAScript #JavaScript

new Date("wtf") How well do you know JavaScript's Date class?

Quiz: How well do you know JavaScript’s Date class?
@samwho.dev
jsdate.wtf

#ECMAScript #JavaScript

Bun v1.2.18 Fixes 52 issues (addressing 112 👍). ReadableStream text(), json(), bytes(), blob(), WebSocket client compression with `permessage-deflate`, `bun pm version`, reduced memory usage for large `fetch()` a...

Bun v1.2.18: ReadableStream methods .text(), .json(), .bytes(), .blob(); and more
@jarredsumner.com
bun.sh/blog/bun-v1....

#ECMAScript #JavaScript