JavaScript

A deep analysis of the coordinated multi-wave npm supply chain attacks (IronWorm, Phantom Gyp, Miasma, Shai-Hulud) that exposed thousands of developers and

Biome replaces ESLint, Prettier, and half your build pipeline with a single Rust-based tool 100x faster — and it’s already becoming the default choice.

Bun just merged a massive PR rewriting its core from Zig to Rust — over a million lines changed in roughly a week.

A massive npm supply chain attack compromised TanStack, Mistral AI’s client library, and over 170 packages.

Deno 2.3 brings workspace support and improved Node compatibility.

As we enter 2026, the JavaScript runtime ecosystem is more competitive and innovative than ever. Here’s where things stand.

Deno 2.5 brings improved Node.js compatibility and workspace support, signaling that the JavaScript runtime competition is driving real innovation.

With Bun 1.0 maturing, Deno pushing Node compatibility, and Node.js evolving faster than ever, the JavaScript runtime landscape is more interesting than it’s

Bun, a new JavaScript runtime built on JavaScriptCore and written in Zig, is making waves with extraordinary benchmark numbers.

Deno 1.0 launches with TypeScript support, a security-first permissions model, and a clean break from Node.js conventions — but can it find its niche?

GitHub’s acquisition of npm consolidates the JavaScript ecosystem’s most critical infrastructure under one roof.