Lightnews — Scholar-powered news

Introducing Socket Firewall: free, proactive protection for your software supply chain
@dale.link @socket.dev
socket.dev/blog/introdu...

#ECMAScript #JavaScript

Introducing Socket Firewall: Free, Proactive Protection for ...

Socket Firewall is a free tool that blocks malicious packages at install time, giving developers proactive protection against rising supply chain atta...

socket.dev

3 6

ECMAScript.News @ecmascript.news · 2d

VoidZero’s new newsletter: “Stay ahead of the curve with exclusive insights into the future of JavaScript tooling”
@voidzero.dev
voidzero.dev/newsletter

#ECMAScript #JavaScript

The VoidZero Newsletter

Subscribe to our newsletter for the latest updates and insights on the Vite ecosystem.

voidzero.dev

ECMAScript.News @ecmascript.news · 2d

I want to intercept boolean coercion for objects in JavaScript
@zachleat.com
www.zachleat.com/web/boolean-...

#ECMAScript #JavaScript

I want to intercept Boolean Coercion for Objects in JavaScript—zachleat.com

A post by Zach Leatherman (zachleat)

www.zachleat.com

ECMAScript.News @ecmascript.news · 9d

devtools.fm podcast: Zoltan Kochan – pnpm and the future of package management
@kochan.io @devtools.fm
www.devtools.fm/episode/154

#ECMAScript #JavaScript

devtools.fm

A podcast about developer tools by the people who make them.

devtools.fm

1

ECMAScript.News @ecmascript.news · 9d

PodRocket podcast: Unpacking the npm supply chain attacks with Feross Aboukhadijeh
@feross.bsky.social @podrocket.bsky.social
podrocket.logrocket.com/unpacking-np...

#ECMAScript #JavaScript

Unpacking the NPM supply chain attacks with Feross Aboukhadijeh

Feross Aboukhadijeh, founder of Socket, joins us to break down the recent wave of NPM supply chain attacks hitting the JavaScript ecosystem, including how attackers used phishing to target developers,...

podrocket.logrocket.com

1 2

ECMAScript.News @ecmascript.news · 9d

`temporal_rs` library powers JavaScript’s Temporal API in the engines V8, Boa and Kiesel
@boajs.dev
boajs.dev/blog/2025/09...

#ECMAScript #JavaScript

Temporal_rs is here! The datetime library powering Temporal in Boa, Kiesel, and V8 | Boa JS

Temporal_rs is here! The datetime library powering Temporal in Boa, Kiesel, and V8

boajs.dev

1

Reposted by ECMAScript.News

ECMAScript.News @ecmascript.news · 9d

Storing unwise amounts of data in JavaScript bigints
@jonathan-frere.com
jonathan-frere.com/posts/bigint...

#ECMAScript #JavaScript

Storing Unwise Amounts of Data in JavaScript Bigints | Jonathan's Blog

Storing Unwise Amounts of Data in JavaScript Bigints This is a short note to document storing data in JS’s bigint type. I tried this out in a project recently, and it’s not obviously a terrible idea, ...

jonathan-frere.com

2 2

ECMAScript.News @ecmascript.news · 9d

Storing unwise amounts of data in JavaScript bigints
@jonathan-frere.com
jonathan-frere.com/posts/bigint...

#ECMAScript #JavaScript

Storing Unwise Amounts of Data in JavaScript Bigints | Jonathan's Blog

Storing Unwise Amounts of Data in JavaScript Bigints This is a short note to document storing data in JS’s bigint type. I tried this out in a project recently, and it’s not obviously a terrible idea, ...

jonathan-frere.com

2 2

ECMAScript.News @ecmascript.news · 9d

npm: “Our plan for a more secure npm supply chain”
github.blog/security/sup...

#ECMAScript #JavaScript

Our plan for a more secure npm supply chain

GitHub is strengthening npm's security with stricter authentication, granular tokens, and enhanced trusted publishing.

github.blog

ECMAScript.News @ecmascript.news · 9d

The JavaScript Handbook, 2025 edition (free with newsletter subscription)
@flaviocopes.com
flaviocopes.com/the-javascri...

#ECMAScript #JavaScript

The JavaScript Handbook (2025 edition)

flaviocopes.com

ECMAScript.News @ecmascript.news · 9d

Survey (Oct 1–Nov 1): “State of JavaScript 2025”
@devographics.com
stateofjs.com

#ECMAScript #JavaScript

Redirecting to: /en-US

stateofjs.com

ECMAScript.News @ecmascript.news · Jul 28

varlock: write .env files with type information and validate, generate types, etc.
varlock.dev

#ECMAScript #JavaScript

varlock

varlock.dev

3

ECMAScript.News @ecmascript.news · Jul 28

NPQ: open source CLI tool that audits and protects npm installs from malicious packages
www.trevorlasn.com/blog/npq-pro...

#ECMAScript #JavaScript

NPQ: Open source CLI tool that audits and protects your n...

A CLI tool that checks packages for security issues and social engineering attacks before they hit your project

www.trevorlasn.com

2

ECMAScript.News @ecmascript.news · Jul 28

ESLint v9.32.0: rules updated for explicit resource management, and more
@humanwhocodes.com @eslint.org
eslint.org/blog/2025/07...

#ECMAScript #JavaScript

ESLint v9.32.0 released - ESLint - Pluggable JavaScript Linter

A pluggable and configurable linter tool for identifying and reporting on patterns in JavaScript. Maintain your code quality with ease.

eslint.org

1

ECMAScript.News @ecmascript.news · Jul 28

Extism: multi-language plugin system based on WebAssembly
extism.org

#ECMAScript #JavaScript

Extism - make all software programmable. Extend from within. | Extism - make all software programmable. Extend from within.

Extism is the open source, universal plug-in system. Extend all the software everywhere! Powered by WebAssembly.

extism.org

2

ECMAScript.News @ecmascript.news · Jul 28

Celebrating 20 years of MDN
@developer.mozilla.org
developer.mozilla.org/en-US/blog/m...

#ECMAScript #JavaScript

Celebrating 20 years of MDN | MDN Blog

MDN turns 20! Let's look at how we started, how MDN became the most trusted resource for web developers, the impact it's had on the open web, and yes, there's cake, too.

developer.mozilla.org

3 9

ECMAScript.News @ecmascript.news · Jul 28

The many, many, many JavaScript runtimes of the last decade
@shirakaba.bsky.social
buttondown.com/whatever_jam...

#ECMAScript #JavaScript

The many, many, many JavaScript runtimes of the last decade

This last decade has seen an inundation of new JavaScript runtimes (and engines in equal measure), enabling us to run JavaScript in all manner of contexts...

buttondown.com

1

ECMAScript.News @ecmascript.news · Jul 28

Minification doesn’t matter much (and has downsides) – thanks to gzip compression
@cferdinandi.bsky.social
gomakethings.com/minification...

#ECMAScript #JavaScript

Minification doesnt matter much

Years ago, I was staunchly in the “minify your code, even if you use gzip” camp. But these days, I’ve switched teams! I did some tests on the bundled version of Kelp UI. Unminifed: 58.2kb Minified: 4...

gomakethings.com

ECMAScript.News @ecmascript.news · Jul 28

es-toolkit: utility library with Lodash compatibility layer
es-toolkit.dev

#ECMAScript #JavaScript

es-toolkit

A state-of-the-art, high-performance JavaScript utility library with a small bundle size and strong type annotations.

es-toolkit.dev

2 4

ECMAScript.News @ecmascript.news · Jul 28

npm package `is` hijacked in expanding supply chain attack
@sarahgooding.bsky.social @socket.dev
socket.dev/blog/npm-is-...

#ECMAScript #JavaScript

npm ‘is’ Package Hijacked in Expanding Supply Chain Attack -...

The ongoing npm phishing campaign escalates as attackers hijack the popular 'is' package, embedding malware in multiple versions.

socket.dev

1 1

ECMAScript.News @ecmascript.news · Jul 28

npm ‘accidentally’ removes Stylus package, breaks builds and pipelines
@axsharma.com ‪@bleepingcomputer.com‬
www.bleepingcomputer.com/news/securit...

#ECMAScript #JavaScript

npm 'accidentally' removes Stylus package, breaks builds and pipelines

npm has taken down all versions of the Stylus library and replaced them with a "security holding" page, breaking pipelines and builds worldwide that rely on the package.

www.bleepingcomputer.com

1