JavaScript

Bun 1.4.3 adds native TypeScript checking. Learn how to gate tests and builds, compare diagnostics, and migrate CI without dropping declaration output.

Vinext 1.0 moves Next.js apps onto Vite with broader router support and cache warming—test compatibility before treating portability as a drop-in guarantee.

ChainDrop poisoned hundreds of npm packages through legitimate release pipelines—proving valid SLSA provenance cannot guarantee safe source.

A deep analysis of the coordinated multi-wave npm supply chain attacks (IronWorm, Phantom Gyp, Miasma, Shai-Hulud) that exposed thousands of developers and

Biome replaces ESLint, Prettier, and half your build pipeline with a single Rust-based tool 100x faster — and it’s already becoming the default choice.

Bun just merged a massive PR rewriting its core from Zig to Rust — over a million lines changed in roughly a week.

A massive npm supply chain attack compromised TanStack, Mistral AI’s client library, and over 170 packages.

Deno 2.3 brings workspace support and improved Node compatibility.

As we enter 2026, the JavaScript runtime ecosystem is more competitive and innovative than ever. Here’s where things stand.

Deno 2.5 brings improved Node.js compatibility and workspace support, signaling that the JavaScript runtime competition is driving real innovation.

With Bun 1.0 maturing, Deno pushing Node compatibility, and Node.js evolving faster than ever, the JavaScript runtime landscape is more interesting than it’s

Bun, a new JavaScript runtime built on JavaScriptCore and written in Zig, is making waves with extraordinary benchmark numbers.