Introducing: 🛜 npm.report Want to start setting up trusted or staged publishing for your org but aren't sure where to start? 🤹 Trouble keeping track of your migration status? 🕵️ Curious how the ecosystem's migration is going? 📈 Want the satisfaction of a chart going up and to the right?
npm.report: supply-chain trust audits for npm orgs
Audit, visualize, share, and track your npm org's trust signals.
npm.report
If you haven't tried Vite+ yet, this is the time! 🎉 Hats off to @fengmk2.bsky.social, Charles, the whole core team and all contributors that helped making this happen!
VoidZero@voidzero.dev · 3mo agoVite+ is now in beta 🚀 One CLI for your whole toolchain, now more powerful than ever: ◆ Smarter caching (vp run auto-tracks files + reads Vite metadata) ◆ Better `vp migrate` for humans and agents ◆ Org templates for teams + proxy- & custom-CA-aware HTTP ◆ Hardened across every major OS & shell
Vite+ is now in beta 🚀 One CLI for your whole toolchain, now more powerful than ever: ◆ Smarter caching (vp run auto-tracks files + reads Vite metadata) ◆ Better `vp migrate` for humans and agents ◆ Org templates for teams + proxy- & custom-CA-aware HTTP ◆ Hardened across every major OS & shell
Announcing Vite+ Beta
Vite+ Beta brings the tools needed to create, develop, check, test, and maintain modern web projects into one fast and consistent workflow.
voidzero.dev
Every time Codex has a new update I wish it would detect that I installed it via Vite+ and not npm 🙈
Say goodbye to svelte.config.js - you don't need it anymore! The newest version of SvelteKit allows you to configure everything via its Vite plugin, and VS Code, svelte-check and SvelteKit itself can all read from it. On file less cluttering your project root.
VoidZero is joining Cloudflare. Our mission stays the same: to make JavaScript developers more productive than ever before. Vite, Vitest, Rolldown, Oxc, and Vite+ remain MIT-licensed. Evan and the VoidZero team will continue leading them.
Today, VoidZero joins Cloudflare. Vite remains MIT, vendor-neutral, and stewarded by the same wider team. The same goes for Vitest, Rolldown, and Oxc. Cloudflare is also committing $1M to an OSS fund to support independent development in the Vite ecosystem.
Cloudflare supports Vite's mission
The VoidZero team is joining Cloudflare. Vite remains MIT, vendor-neutral and stewarded by the same wider team.
vite.dev
We've published a Browser Mode security advisory. CDP-capable providers like Playwright Chromium with the browser API exposed to the network allowed attackers to run code on the host. Update vitest/browser to 5.0.0-beta.4, 4.1.8, or 3.2.6. Vite+ users: Upgrade to 0.1.24 github.com/vitest-dev/v...
Exposed Browser Mode API Can Proxy CDP and Overwrite Config Files, Leading to RCE
## Summary Vitest Browser Mode exposes a `cdp()` API that forwards raw Chrome DevTools Protocol (CDP) methods over the Vitest browser WebSocket RPC. CDP is not gated by `browser.api.allowWrite`,...
github.com
We've published two Windows-related security advisories: ◇ If Vite runs with `--host`, denied files may have been reachable over the network. ◇ launch-editor with NTLM enabled may leak NTLMv2 hashes via a malicious page. Update to Vite 8.0.16/7.3.5/6.4.3, Vite+ 0.1.24, and launch-editor 2.14.1.
💯 Oh wow, great job @voidzero.dev on this new(?) page: oxc.rs/compatibilit.... Until now it was a pain to find the current status for any given combo at any given time. 💡 Here's a free idea: let me click a cell in this table to subscribe to updates and send me an email when that status changes.
Oxlint & Oxfmt Compatibility
Check which JavaScript frameworks and file types are supported by Oxlint (linting) and Oxfmt (formatting).
oxc.rs
fate 1.0: The first full Async React Metaframework New in 1.0: * Zero-Config Live Views via SSE * Drizzle Support * "Native" HTTP support (no tRPC) * Void Router * Vite plugin * Clientside Garbage Collection * Performance & scalability improvements fate.technology/posts/fate-1.0
fate 1.0 | fate
A Modern React Data Framework
fate.technology
One thing I like a lot about Vite Plus is how easy it makes working on multiple projects I can just use `vp install` and not care what package manager or Node version the project uses
There's some impressive work going on with 3rd party oxc powered coverage instrumentation that can replace Babel based istanbul-lib-instrument 👀 > 8-11x faster than babel-plugin-istanbul, 13-15x faster than swc-plugin-coverage-instrument (Rust/WASM), 25-30x faster than istanbul-lib-instrument.
GitHub - fallow-rs/oxc-coverage-instrument: Istanbul-compatible JavaScript/TypeScript coverage instrumentation using the Oxc AST
Istanbul-compatible JavaScript/TypeScript coverage instrumentation using the Oxc AST - fallow-rs/oxc-coverage-instrument
github.com
Seriously! Vite+ is exactly what I've been missing without even knowing it. Love it! ❤️
VoidZero@voidzero.dev · 6mo agoGreat news for all Windows users! Vite+ now has a standalone installer, supporting both x64 and ARM 🎉 setup.viteplus.dev
In the next version of Vite+ We will support bun as package manager 😁
Vite+ is open source under MIT and free for everyone.
VoidZero@voidzero.dev · 7mo agoAnnouncing Vite+ Alpha. Now open source. To make JavaScript developers more productive than ever before. A single binary that: ◆ Unifies your frontend toolchain ◆ Manages your runtime & pkg manager ◆ Caching & monorepo support Works with every framework and meta framework in the Vite ecosystem.
Introducing Void, the Vite-native deployment platform: 🚀 Full-stack SDK ⚙️ Auto-provisioned infra (db, kv, storage, AI, crons, queues...) 🔒 End-to-end type safety 🧩 React/Vue/Svelte/Solid + Vite meta-frameworks 🌐 SSR, SSG, ISR, islands + Markdown 🤖 AI-native tooling ☁️ One-command deploys void.cloud
VoidZero@voidzero.dev · 7mo agoOne. More. Thing. youtu.be/Bp86buftbX8
Vite+ is fully MIT 👏 now we're talking! Go vp build some great websites
VoidZero@voidzero.dev · 7mo agoAnnouncing Vite+ Alpha. Now open source. To make JavaScript developers more productive than ever before. A single binary that: ◆ Unifies your frontend toolchain ◆ Manages your runtime & pkg manager ◆ Caching & monorepo support Works with every framework and meta framework in the Vite ecosystem.
Dropping 3 announcements in a single talk at Vue Amsterdam this week. @vuejsamsterdam.bsky.social
Congrats to @npmx.dev on launching their alpha! We share the same vision: making JavaScript developers more productive. They chose to build on the VoidZero toolchain, and their feedback has already shipped real performance improvements back to the community. This is open source at its best.
VoidZero and npmx: Building Better Tools Together
How VoidZero and npmx.dev share a vision for making JavaScript developers more productive, and how real-world feedback from open-source builders helps improve our tooling.
voidzero.dev
npmx is now in alpha: this is our story, as told by our team and friends
Announcing npmx: a fast, modern browser for the npm registry
Today we're releasing the alpha of npmx.dev – a fast, modern browser for the npm registry, built in the open by a growing community.
npmx.dev
🦀 Experimental @Angular.dev compiler written in Rust by the VoidZero team👀🔥 github.com/voidzero-dev...
GitHub - voidzero-dev/oxc-angular-compiler: Experimental Angular Compiler based Oxc
Experimental Angular Compiler based Oxc. Contribute to voidzero-dev/oxc-angular-compiler development by creating an account on GitHub.
github.com
Do you prefer `.mjs` or `.js` for Node libraries? I used to favor `.js`, but `.mjs` seems to improve toolchain performance. Since Node will support CJS for the foreseeable future, we need an easier way to tell ESM and CJS apart. github.com/rolldown/tsd...
feat!: defaults `fixedExtension` to true when platform is `node` by sxzz · Pull Request #517 · rolldown/tsdown
Description Defaults fixedExtension to true when platform is node. Linked Issues Additional context
github.com
Just talked about Vite+ at @viteconf.org - check out more at viteplus.dev :) More detailed announcement on Monday!
Vite+
The Unified Toolchain for the Web
viteplus.dev
