Trust in JS supply chain; sync vs. async code; JIT vulnerabilities; parseInt() and keycap emojis; V8

Secure your JavaScript dependencies.

socket.dev Sponsor

Open source code makes up 90% of most codebases. Socket detects what traditional vulnerability scanners can’t, including 70+ indicators of open source supply chain risk like malware, typosquatting, hijacked packages, obfuscated code, privileged APIs, and more. Install our free GitHub app today to instantly enable protection on all updates and new dependencies added in PRs.

Reproducibility vs. provenance: trusting the JavaScript supply chain

blog.vlt.sh @darcy@fosstodon.org

“Enter reproduce, a new open-source tool designed to independently verify whether a published npm package can be faithfully rebuilt from its declared source. Unlike provenance systems that merely associate a package with a build environment (which can be ephemeral and manipulated), reproduce goes a step further—empirically testing whether the package metadata actually corresponds to its purported source.”

Async, sync, in between: writing code that can be used synchronously and asynchronously

antfu.me @antfu@webtoo.ls

A mere mortal’s introduction to JIT vulnerabilities in JavaScript engines

trustfoundry.net github.com/JosiahPierce

To parse an int: parseInt() and keycap emojis

www.aleksandrhovhannisyan.com github.com/AleksandrHovhannisyan

The blog post explains the following phenomenon:

> parseInt('4️⃣')
4

Turbocharging V8 with mutable heap numbers

v8.dev

“[...] we recently revisited the JetStream2 benchmark suite to eliminate performance cliffs. This post details a specific optimization we made that yielded a significant 2.5× improvement in the async-fs benchmark, contributing to a noticeable boost in the overall score. The optimization was inspired by the benchmark, but such patterns do appear in real-world code.”

Packages and tools

Node Modules Inspector: Visualize node_modules, inspect dependencies, and more

node-modules.dev @antfu@webtoo.ls

ohash: simple object hashing, serialization and comparison

github.com github.com/pi0 github.com/unjs

Unstorage: async key-value storage API for browser, workers, Node.js

github.com github.com/pi0 github.com/unjs

This email was sent to you. You can unsubscribe from this list here or update your preferences.

Older messages

Bundling dependencies; keyword `using`; Intl.DurationFormat; vlt client; Deno npm module specifiers;

Thursday, February 27, 2025

We have 13 links for you - Stay up-to-date on JavaScript and tools Dear readers! We moved the publication day of ECMAScript News from Tuesday to Wednesday – which works better with our schedules.

Alternatives to npm; TC39 meeting; Rust and JS plugins; long-term software maintenance; WeakMaps; JS

Thursday, February 27, 2025

We have 14 links for you - the latest on JavaScript and tools Is npm enough? Why startups are coming after this JavaScript package registry redmonk.com @kateholterhoff@hachyderm.io @redmonk@mastodon.

JSR open governance board; ESM-only packages; breaking up long tasks; Prettier 3.5; esbuild v0.25.0;

Friday, February 14, 2025

We have 9 links for you - Stay up-to-date on JavaScript and tools Introducing the JSR open governance board deno.com github.com/ry @lcasdev@mastodon.social github.com/crowlKats @deno_land@fosstodon.org

State of JS 2024; compiling JS via Porffor; source map format specification; December TC39 meeting;

Thursday, December 19, 2024

We have 9 links for you - Stay up-to-date on JavaScript and tools Dear readers! We are taking our end-of-the-year break and will be back on 21 January 2025. Be well and see you soon! Axel and Jowe

Require(esm) in Node.js LTS; simplified npm search; JS videos; Rolldown v0.15.0; oxlint v0.14.0

Tuesday, December 10, 2024

We have 6 links for you - Stay up-to-date on JavaScript and tools Node.js v22.12.0 (LTS): require(esm) is enabled by default nodejs.org @ruyadorno@fosstodon.org @nodejs@social.lfx.dev require(esm)

You Might Also Like

Simplify Kotlin Error Handling

Thursday, March 6, 2025

View in browser 🔖 Articles Goodbye try-catch, Hello runCatching! Exception handling in Kotlin just got cleaner! This article explores how runCatching can replace traditional try-catch blocks, making

JSK Daily for Mar 5, 2025

Wednesday, March 5, 2025

JSK Daily for Mar 5, 2025 View this email in your browser A community curated daily e-mail of JavaScript news Unions and intersections of object types in TypeScript In this blog post, we explore what

Daily Coding Problem: Problem #1709 [Medium]

Wednesday, March 5, 2025

Daily Coding Problem Good morning! Here's your coding interview problem for today. This problem was asked by Facebook. Given an array of integers, write a function to determine whether the array

How Swiss Tables make Go 1.24 faster

Wednesday, March 5, 2025

Plus a way to call external library functions without Cgo. | #​544 — March 5, 2025 Unsub | Web Version Together with pgAnalyze Go Weekly Faster Go Maps with Swiss Tables — One of Go's newest

Mapped | European Fertility Rates by Country 👶

Wednesday, March 5, 2025

The population replacement threshold is a fertility rate of 2.1. In 2025, all of Europe, except one small nation, is well below that level. View Online | Subscribe | Download Our App Invest in your

The importance of flow state for developers

Wednesday, March 5, 2025

You are receiving this email because you subscribed to microservices.io. Considering migrating a monolith to microservices? Struggling with the microservice architecture? I can help: architecture

This beefy phone is a projector too 📽️

Wednesday, March 5, 2025

Biggest tech opps; How Firefox changed; Drone flying tips -- ZDNET ZDNET Tech Today - US March 5, 2025 GOTRAX 4 electric scooter A smartphone that's also a projector? I tested it, and it's

⚙️ Self-driving Ubers

Wednesday, March 5, 2025

Plus: A trade war, and AI ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌

Post from Syncfusion Blogs on 03/05/2025

Wednesday, March 5, 2025

New blogs from Syncfusion ® S&P 500 Returns After Rate Cuts: Visualized Using a Flutter Heatmap By Kompelli Sravan Kumar Kompelli Lakshman Learn how to visualize the S&P 500 returns after