“State of JavaScript 2023” survey; QuickJS-ng v0.1.0; esbuild 0.19.7; show package version downloads

The “State of JavaScript 2023” survey is open

Quoting the frequently asked questions:

When will the results be released?
The survey will run from November 22 to December 12, and the survey results will be released shortly after that.
How long will answering the survey take?
Depending on how many questions you answer (all questions are optional), filling out the survey should take around 15-20 minutes.

Welcome to QuickJS-ng [friendly fork of JavaScript engine QuickJS]

github.com @s@social.saghul.net github.com/bnoordhuis github.com/bellard

Saúl Ibarra Corretgé on Mastodon: “Introducing QuickJS-ng! My buddy Ben [Noordhuis] and I have been working on reingniting the QuickJS project. We just released a new version with top-level await and many more ECMAScript features, check it out!”

Implemented in C
Can be installed via jsvu: “jsvu makes it easy to install recent versions of various JavaScript engines without having to compile them from source.”

esbuild 0.19.7

github.com @evanw@hachyderm.io

Highlight of esbuild 0.19.7:

Add support for bundling code that uses import attributes

Highlight of esbuild 0.19.6:

Allow package subpath imports to map to node built-ins

package-majors: How often were the major versions of a given npm package downloaded during the past week?

majors.nullvoxpopuli.com @nullvoxpopuli@mastodon.coffee

The diagram tells you which old versions are still popular. You can then investigate why people aren’t upgrading.

How Socket combats insidious typosquatting supply chain attacks

socket.dev @sarahgooding@fosstodon.org @SocketSecurity@fosstodon.org

“Socket’s free GitHub app was created to detect malicious packages and is your first line of defense against typosquatting, among other supply chain risks […]. It offers real-time scanning of incoming dependencies with every pull request. When a potential typosquatted package is detected, the app instantly alerts the developer who submitted the PR (or the one reviewing it) through a GitHub comment.”

‍

This email was sent to you. You can unsubscribe from this list here or update your preferences.

‍

“State of JavaScript 2023” survey; QuickJS-ng v0.1.0; esbuild 0.19.7; show package version downloads

The “State of JavaScript 2023” survey is open

Welcome to QuickJS-ng [friendly fork of JavaScript engine QuickJS]

esbuild 0.19.7

package-majors: How often were the major versions of a given npm package downloaded during the past week?

How Socket combats insidious typosquatting supply chain attacks

Older messages

Vite 5.0; Prettier 3.1; Node v21.2.0; Bun v1.0.12; explicit resource management; JS strings in V8

Pacquet package manager; WebGPU; test automation; NodeConf EU 2023 videos

Bun 1.0.9; Deno 1.38; service workers server WinterJS; deprecation of ESLint formatting rules; Test2

CodiumAI; Yarn 4.0; Node v21.1.0; test assertion styles; dependency divergence; performance-compare

Oxc tool chain; Node.js 21; Biome v1.3.0; Biome toolchain; ESLint v8.52.0; Compiling JS to Wasm

You Might Also Like

Import AI 399: 1,000 samples to make a reasoning model; DeepSeek proliferation; Apple's self-driving car simulator

Defining Your Paranoia Level: Navigating Change Without the Overkill

5 ways AI can help with taxes 🪄

Recurring Automations + Secret Updates

The First Provable AI-Proof Game: Introducing Butterfly Wings 4

GCP Newsletter #437

Charted | The 1%'s Share of U.S. Wealth Over Time (1989-2024) 💰

The Great Social Media Diaspora & Tapestry is here

Daily Coding Problem: Problem #1689 [Medium]

📧 Stop Conflating CQRS and MediatR