⚠️ Already saw two cases today where newly created GitHub accounts posted comments with a ZIP file claiming to contain a fix for the reported issue. In both cases, the ZIP contained malware. **Remember to check issue comments before letting AI agents loose on them.**

Just released sonda v0.13.0. It still has only 2 direct dependencies, but I replaced `open` with `tiny-open` by @fabiospampinato.bsky.social, which brought the total dependency count down from 17 to 6. Nice little dependency cleanup.

sonda - npmx

Universal bundle analyzer and visualizer that works with most popular bundlers and frameworks.

npmx.dev

Chrome shipped an LLM Prompt API to the web platform. At Mozilla, we oppose this API. Here's why:

🚀Rolldown 1.0 is here!🚀 Rust-based high-performance JavaScript bundler. 🏎️ Runs at native speed that’s up 30x faster than Rollup 🤝 Compatible with existing Rollup & Vite plugins ⚡The underlying bunder for Vite After 2 years, Rolldown is officially stable and has 20+M weekly downloads.

CSS nesting is now Baseline 🎉 Write nested selectors directly in CSS — just like Sass, but natively. .card { color: black; &:hover { color: blue; } .title { font-weight: bold; } } No preprocessor needed. Learn more 👇 developer.mozilla.org/en-US/docs/...

Some thoughts about AI-assisted coding and how it affects my brain. I'm more productive and more exhausted at the same time. marvinh.dev/blog/ddosing...

DDoS'ing the human brain

AI made us mass produce code at a scale we never could before. More code, more problems, same brain. Somehow I'm more productive and more exhausted at the same time.

marvinh.dev

Some recent Rspack benchmark trends. Rspack 2.0 work is helping improve performance steadily⚡️

TypeScript 6.0 is now available! This release brings better type-checking for methods, new standard library features, new module features for Node.js, and more! But most important, this release brings us one step closer to the upcoming native-speed 7.0! devblogs.microsoft.com/typescript/a...

Announcing TypeScript 6.0 - TypeScript

TypeScript 6.0 is now available! TypeScript 6 is a stepping-stone release, aligning with the upcoming native-speed 7.0 release.

devblogs.microsoft.com

new post on my personal blog. i think these three areas often go unexplained, so hopefully this explains why some of these packages exist. these are fine to exist but the majority of developers shouldn't have to pay the cost for them.

Recently added a connection diagram view to Sonda 👀 It complements the treemap view and makes it much easier to see how bundles and source files connect. Also, you can now upload JSON reports and get an instant HTML report: sonda.dev/demo

Vitest 4.1 is out! 🚀 ✅ Vite 8 support from day 1 🏷️ Test tags to organize, filter & apply shared options 🪝 New hooks for easier tracing, transactions and AsyncLocalStorage 🔍 Async leak detection 🤖 Agent reporter to reduce token usage And much more! Full blog post at vitest.dev/blog/vitest-...

Announcing Vitest 4.1

Vitest 4.1 Release Announcement

vitest.dev

⚡️ Vite 8.0 is here! The most significant architectural change since Vite 2. ⏬ Powered by @rolldown.rs bringing faster production builds and more consistency 🛤️ New features such as tsconfig paths and emitDecoratorMetadata support vite.dev/blog/announc...

Vite 8.0 is out!

Vite 8 Release Announcement

vite.dev

Node.js is moving to one major release per year starting with Node 27! 🚀 ✅ Simpler: Every release becomes LTS. ✅ Predictable: Version numbers now align with the year. ✅ New: A 6-month Alpha channel for early testing. https://bit.ly/4rnosLg

Node.js — Evolving the Node.js Release Schedule

Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.

nodejs.org

Happy Monday CSS gang. Let's improve CSS minifiers! Here's a suite of 350 minifier tests I've written that show there's lots of opportunities for minifiers to do better: www.keithcirkel.co.uk/css-minify-t... I know you all can help add 350 more, so come contribute! github.com/keithamus/cs...

🙋‍♂️ I _could not be more thrilled_ this isn't a zero-sum game we're here to make the web better for everyone, and this is a win 🔥 props to @npmjs.bsky.social 🙏

Filip Sobol@filipsobol.com · 6mo ago

Well, well, well... look who suddenly remembered they can ship new features. Right after the community started working on an alternative. What a coincidence! 🙃

Well, well, well... look who suddenly remembered they can ship new features. Right after the community started working on an alternative. What a coincidence! 🙃

TypeScript 6.0 beta is now published! This release brings - inference improvements for functions - updates to package.json 'imports' - the Temporal APIs - alignments for the upcoming TypeScript 7.0 - & more! Try it today! devblogs.microsoft.com/typescript/a...

Announcing TypeScript 6.0 Beta - TypeScript

Today we are announcing the beta release of TypeScript 6.0! To get started using the beta, you can get it through npm with the following command: npm install -D typescript@beta TypeScript 6.0 is a uni...

devblogs.microsoft.com

In Firefox 147, you no longer need heavy libraries to (de)compress brotli with JS - you can just use CompressionStream and DecompressionStream!

@vuejs.org 3.6 beta is out with Vapor Mode! github.com/vuejs/core/r...

Release v3.6.0-beta.1 · vuejs/core

Vue 3.6 is now entering beta phase as we have completed the intended feature set for Vapor Mode as outlined in the roadmap! Vapor Mode now has feature parity with all stable features in Virtual DOM...

github.com

I made something new: an eslint plugin to validate your npm ecosystem lockfiles! It supports npm, pnpm, yarn, bun, and vlt, and it's already helped find a supply chain security attack vector inside a fortune 500 tech company. www.npmjs.com/package/esli...

Want to understand why some of your @vitest.dev tests are slower than expected? Then you can use the built-in experimental @opentelemetry.io support to figure out what makes tests slow and how much time is spent on each part of it. 📈

⚔️introducing TypeSlayer⚔️ A #typescript type performance benchmarking and analysis tool. A summation of everything learned from the benchmarking required to make the Doom project happen. It's got MCP support, Perfetto, Speedscope, Treemap, duplicate package detection, and more.

We've got some updates on TypeScript 7! The new native port - can type-check any project - supports --build and --incremental - has rich editor features implemented - is still 10x faster and is ready for you to try today! devblogs.microsoft.com/typescript/p...

Progress on TypeScript 7 - December 2025 - TypeScript

Earlier this year, the TypeScript team announced that we’ve been porting the compiler and language service to native code to take advantage of better raw performance, memory usage, and parallelism. Th...

devblogs.microsoft.com

I actually love this disclaimer

The glob library on npm currently has a CVE. It's entirely predictable since it has 26 dependencies. If you're getting a security warning from glob it's a good time to see if you can switch to a lighter dependency such as tinyglobby or Node's built-in glob functionality: nodejs.org/api/fs.html#...

tinyglobby is a great success, and has shown us how much we can improve perf for everyone. here's some of the story! big thanks to @superchupu.dev and @benmccann.com for putting so much work into this and the migrations/adoption. we're lucky to have both in the @e18e.dev community 💙

tinyglobby: a success story in modernization and performance

The story of tinyglobby, one of the e18e community's most successful projects

e18e.dev

View transitions are in every browser now ✨

Ollie Williams@ollie-williams.bsky.social · 10mo ago

Firefox now supports view transitions, the command and commandfor HTML attributes, and the moveBefore() method. www.firefox.com/en-US/firefo...

We all dodged a bullet https://xeiaso.net/notes/2025/we-dodged-a-bullet/

second: devs tend to fixate on repetitiveness as a sign of poor code quality. but the cure is often worse than the disease, because if unchecked it leads to the thing that, in my experience, really _is_ a sign of poor code quality: indirection. when you're writing code, indirection is your nemesis.

some thoughts about the bloat introduced by edge-case first libraries