I mean, I hate hype, but ... 🤷

srvx 0.12 landed 🎉 🔧 25+ fixes in the Node.js adapter ⚡ Precomputed middleware: +18-25% faster ⚡ Faster logger middleware: +34.3% faster 📁 Static middleware w/ conditional caching + streaming + stronge security hardenings Strongly recommend upgrading!

Vitest is now mirrored to @tangled.org! Powered by @danielroe.dev's synchub.to

vitest.dev/vitest

[READ-ONLY] Mirror of https://github.com/vitest-dev/vitest. Next generation testing framework powered by Vite.

tangled.org

Pinia v4 is out! Install size reduced by 77% ESM only Better errors with Nostics Vue Devtools as a peer dep github.com/vuejs/pinia/... Go give it a try!

Release v4.0.0 · vuejs/pinia

Pinia 4 Pinia 4 contains only technically breaking changes: ESM only and upgrading @vue/devtools-api which now must be installed alongside pinia. It contains a major refactor of errors and dev warn...

github.com

Node.js 26.4.0 is out with a new `node:vfs` built-in module (behind `--experimental-vfs` flag). It also adds support for package maps, and many bug fixes, including a fix for a regression shipped with last week security release. Full changelog and download links at nodejs.org/en/blog/rele...

Node.js — Node.js 26.4.0 (Current)

Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.

nodejs.org

Matteo Collina@nodeland.dev · 5mo ago

npm install @platformatic/vfs When node:vfs ships in core, migrating is a one-line import change. Full blog post with all the details, code examples, and the story behind the PR: blog.platformatic.dev/why-nodejs-n...

Suraj has a point.

Meet Nuxi 💚 nuxt.com’s AI assistant now has a name and a face. Sign in with GitHub to unlock: ✨ Saved chats across devices 🌿 Branch conversations 🔗 Public thread sharing 📚 Answers grounded in official docs, modules, and the ecosystem Open with ⌘I or go to /dashboard/chat nuxt.com/blog/meet-nuxi

i’m going to be streaming tomorrow with @gioboa.bsky.social and @nst.blue - building a nuxt module for module federation 🔥 join us tomorrow at time.is/2.30pm%20bst 🙏 👉 twitch.tv/danielroe

In node-modules-inspector@2.1.0, we added a new report page "Maintainer Actions", which lists actionable changes for package maintainers to move the ecosystem forward. With pre-constructed prompts to copy if you want agents to do that for you. github.com/antfu/node-m...

This is an S-tier, gold standard write-up of the recent TanStack supply chain attack. Extremely impressive how fast it was detected and mitigated, even if part of it was good luck. tanstack.com/blog/npm-sup...

Postmortem: TanStack npm supply-chain compromise | TanStack Blog

On 2026-05-11, an attacker chained a pull_request_target Pwn Request, GitHub Actions cache poisoning across the fork↔base trust boundary, and OIDC token extraction from runner memory to publish 84 mal...

tanstack.com

Did you know that @vitest.dev has an Agent reporter? 🤖 Instead of outputting all the details, it ensures only the failing tests and summary are sent to your agent. That means less tokens used and less information overload. Since Vitest 4.1 this is the default when detecting an agent.

back in February when OpenClaw was getting exponential by the hour, I deep-dived into agent skills security research with the awesome AI security team at @Snyk now I'm gonna share with you a bunch of these learnings and findings at Tessl's AI Native DevCon in London on June 1-2 who's coming??

🛶 coderaft :: A fully functional VS Code packed into a ~25MB, zero-dependency, platform-agnostic npm package.

We optimized everything for text. But forgot about the most natural human interface: Voice. VoiPi :: A simple way to give your Apps, CLIs, and Agents a voice. Powered by local TTS engines (OS, browser, Piper) or free providers (Google, Microsoft Edge).

🍪 released cookie-es v3 with RFC 6265bis compliance, stricter validation, safer defaults, and improved APIs. github.com/unjs/cookie-...

Release v3.0.0 · unjs/cookie-es

cookie-es v3 brings full RFC 6265bis compliance with stricter validation, safer defaults, and improved APIs. Originally based on latest jshttp/cookie and nfriedly/set-cookie-parser. serialize() acc...

github.com

Made this a while ago. Win98 + AI (LLM, TTS, STT) running fully in browser!

Nitro dev server used to support only Node.js worker threads. Soon it will be much more flexible: github.com/unjs/env-run...

GitHub - unjs/env-runner: Generic environment runner for JavaScript runtime.

Generic environment runner for JavaScript runtime. - unjs/env-runner

github.com

late to the party. I have finally been convinced by multiple awesome developers to give agents another try. this is my first premature contribution: github.com/antfu/skills

GitHub - antfu/skills: Anthony Fu's curated collection of agent skills.

Anthony Fu's curated collection of agent skills. Contribute to antfu/skills development by creating an account on GitHub.

github.com

⚡️ The first Vite 8.0 beta is here! - Powered by Rolldown, bringing significantly faster production builds and more consistency - New features such as tsconfig paths or emitDecoratorMetadata support - Bumping browser targets aligned with Baseline Widely Available Read more in our announcement post!

Vite 8 Beta: The Rolldown-powered Vite

The first beta of Vite 8, powered by Rolldown, is now available. Vite 8 ships significantly faster production builds and unlocks future improvement possibilities. Read more about the migration, new fe...

voidzero.dev

How Modern Browsers Work, by @addyosmani@indieweb.social: https://archive.ph/Kj62o #browsers #chromium #network #parsing #painting

Cross-Browser Anchor Positioning, by @meyerweb@mastodon.social and @jamessw.com and others (@oddbird@front-end.social): https://www.oddbird.net/2025/11/20/winging-it-26/ #videos #interviews #css #anchorpositioning

Cross-Browser Anchor Positioning

Anchor Positioning is available in all browsers. What's next, with Eric Meyer.

oddbird.net

Good Visual Design, Explained, by @nngroupux.bsky.social: https://www.nngroup.com/articles/good-visual-design/ #design #principles #quality

Good Visual Design, Explained

To create appealing designs, align type and elements to a grid, build a clear visual hierarchy, use color intentionally, and stay consistent with every design choice.

nngroup.com

Vitest 4.0.15 comes with a cool experimental feature: Imports Breakdown. Every module shows how long it took to load in UI and in the VSCode extension! Pass down `--experimental.printImportBreakdown` to also see it in your terminal. vitest.dev/guide/ui.htm...

It’s amazing how quickly the Go version of TypeScript was created. The key “trick” of the TS team was to port, not to rewrite: 2ality.com/2025/03/type...

TypeScript@typescriptlang.org · 9mo ago

We've got some updates on TypeScript 7! The new native port - can type-check any project - supports --build and --incremental - has rich editor features implemented - is still 10x faster and is ready for you to try today! devblogs.microsoft.com/typescript/p...

Just spent the last 40 minutes screaming every variation of "WHAT THE EVER LOVING HELL" at my computer. This is absolutely insane and deserves so much more attention: www.youtube.com/watch?v=uB0g...

We Hacked Flock Safety Cameras in under 30 Seconds. 🫥

YouTube video by Benn Jordan

youtube.com

📣 Nx 22.1 is here! 🪟 Nx TUI enabled on Windows 📖 @storybook.js.org v10 support ⚡ @vitest.dev v4 support 🤯 ...and more! Get all the details on our blog: nx.dev/blog/nx-22-...

Given Shai-Hulud comeback (hello SHA1-HULUD 👋) It is quite timely to share my up-to-date repository for modern npm security best practices against supply chain malware attacks:

GitHub - lirantal/npm-security-best-practices: Collection of npm package manager Security Best Practices

Collection of npm package manager Security Best Practices - lirantal/npm-security-best-practices

github.com

aarontgrogg.com/blog/2023/06...

Web Performance Audits: What's in your Checklist?

Performance audits are an invaluable step in fine-tuning a site's performance. But man there is a lot to look at... Here I offer my starter list. Anything you's like to see added? Happy auditing!

aarontgrogg.com

"Whimsical SVG hover animation with GSAP" by Josh Dillon codepen.io/jdillon/pen/...

If you use @sli.dev within a monorepo, you might want to try this project by Leo Chiu! github.com/leochiu-a/sl...

GitHub - leochiu-a/slidev-workspace

Contribute to leochiu-a/slidev-workspace development by creating an account on GitHub.

github.com