Eric Lee
@sdust.dev
Senior Software Engineer | Helping developers stay current with tech news and grow their careers through consistency
Newsletter: https://beyondwebnewsletter.dev
Newsletter: https://beyondwebnewsletter.dev
Chrome 144 beta just dropped with a bunch of great new CSS features and Web APIs. The one that stood out to me is the Temporal API. It fixes the pain points of the current Date API with reliable math and proper timezone support. Excited to see it landing in more browsers.
December 9, 2025 at 11:09 PM
Chrome 144 beta just dropped with a bunch of great new CSS features and Web APIs. The one that stood out to me is the Temporal API. It fixes the pain points of the current Date API with reliable math and proper timezone support. Excited to see it landing in more browsers.
TanStack just dropped TanStack AI Alpha.
- Framework-agnostic
- Provider-agnostic
- Open protocol
- Type-safe tools across client + server
- JS/TS, PHP, Python support
- React + Solid clients
- Devtools for full agentic flows
TanStack universe is expanding to help build AI application your way.
- Framework-agnostic
- Provider-agnostic
- Open protocol
- Type-safe tools across client + server
- JS/TS, PHP, Python support
- React + Solid clients
- Devtools for full agentic flows
TanStack universe is expanding to help build AI application your way.
TanStack AI Alpha: Your AI, Your Way | TanStack Blog
The TanStack team is excited to announce the alpha release of , a framework-agnostic AI toolkit built for developers who want control over their stack. Let's be honest. The current AI landscape has a....
tanstack.com
December 4, 2025 at 10:56 PM
TanStack just dropped TanStack AI Alpha.
- Framework-agnostic
- Provider-agnostic
- Open protocol
- Type-safe tools across client + server
- JS/TS, PHP, Python support
- React + Solid clients
- Devtools for full agentic flows
TanStack universe is expanding to help build AI application your way.
- Framework-agnostic
- Provider-agnostic
- Open protocol
- Type-safe tools across client + server
- JS/TS, PHP, Python support
- React + Solid clients
- Devtools for full agentic flows
TanStack universe is expanding to help build AI application your way.
Time to do security upgrade for your RSC applications. This vulnerability allows an attacker to craft a malicious payload that tricks React’s deserialization logic into executing arbitrary code on the server without authentication.
Critical Security Vulnerability in React Server Components – React
The library for web and native user interfaces
react.dev
December 3, 2025 at 5:52 PM
Time to do security upgrade for your RSC applications. This vulnerability allows an attacker to craft a malicious payload that tricks React’s deserialization logic into executing arbitrary code on the server without authentication.
Bun is joining Anthropic!
It all started with Claude Code adopting Bun and you have been using Bun executables without realizing.
Nothing changes for us while Bun continues supporting Claude Code and AI infra for Anthropic.
It all started with Claude Code adopting Bun and you have been using Bun executables without realizing.
Nothing changes for us while Bun continues supporting Claude Code and AI infra for Anthropic.
Bun is joining Anthropic
Bun has been acquired by Anthropic. Anthropic is betting on Bun as the infrastructure powering Claude Code, Claude Agent SDK, and future AI coding products & tools.
bun.com
December 2, 2025 at 7:01 PM
Bun is joining Anthropic!
It all started with Claude Code adopting Bun and you have been using Bun executables without realizing.
Nothing changes for us while Bun continues supporting Claude Code and AI infra for Anthropic.
It all started with Claude Code adopting Bun and you have been using Bun executables without realizing.
Nothing changes for us while Bun continues supporting Claude Code and AI infra for Anthropic.
Liquid Glass in the browser? It’s possible with SVG + CSS.
A brilliant deep dive into simulating refraction:
- Define a "lens" shape with JS math.
- Convert physics vectors into an RGB Displacement Map.
- Apply via SVG inside a CSS backdrop-filter.
kube.io/blog/liquid-...
A brilliant deep dive into simulating refraction:
- Define a "lens" shape with JS math.
- Convert physics vectors into an RGB Displacement Map.
- Apply via SVG
kube.io/blog/liquid-...
November 27, 2025 at 4:07 PM
Liquid Glass in the browser? It’s possible with SVG + CSS.
A brilliant deep dive into simulating refraction:
- Define a "lens" shape with JS math.
- Convert physics vectors into an RGB Displacement Map.
- Apply via SVG inside a CSS backdrop-filter.
kube.io/blog/liquid-...
A brilliant deep dive into simulating refraction:
- Define a "lens" shape with JS math.
- Convert physics vectors into an RGB Displacement Map.
- Apply via SVG
kube.io/blog/liquid-...
Yoo I just saw this Dynamic view in Gemini. It just codes a fully functional website to teach me new concepts. A glimpse to a future of dynamic interface for whatever users are searching for.
November 20, 2025 at 1:44 AM
Yoo I just saw this Dynamic view in Gemini. It just codes a fully functional website to teach me new concepts. A glimpse to a future of dynamic interface for whatever users are searching for.
This might be my favorite way to quickly learn anything now. Have Gemini apply 80/20 rule to extract key information and code a website to see them visually.
November 19, 2025 at 10:16 PM
This might be my favorite way to quickly learn anything now. Have Gemini apply 80/20 rule to extract key information and code a website to see them visually.
Architecture isn’t saved by patterns. It’s saved by people. Give ownership and the system will detangle itself.
*People* detangle a ball of mud | Swizec Teller
Ball of mud is the world's most popular software architecture. The one we all use at work. But it sucks to work with. So what do you do?
swizec.com
November 19, 2025 at 5:46 PM
Architecture isn’t saved by patterns. It’s saved by people. Give ownership and the system will detangle itself.
Spent 10 minutes with Gemini 3 Thinking. It definitely cooks with frontend landing page! Added subtle micro interaction and motions to be more appealing
It might have just finished a landing page for an idea I've been having in mind.
gemini.google.com/share/78e023...
It might have just finished a landing page for an idea I've been having in mind.
gemini.google.com/share/78e023...
November 19, 2025 at 6:38 AM
Spent 10 minutes with Gemini 3 Thinking. It definitely cooks with frontend landing page! Added subtle micro interaction and motions to be more appealing
It might have just finished a landing page for an idea I've been having in mind.
gemini.google.com/share/78e023...
It might have just finished a landing page for an idea I've been having in mind.
gemini.google.com/share/78e023...
Just gave lazygit a try and wow I could see all my staging, branching, & commits now in one slick TUI. If you still type everything manually, you might want to give this a try.
The (lazy) Git UI You Didn't Know You Need
When my son was born last April, I had ambitious learning plans for the upcoming 5w paternity leave. As you can imagine, with two kids, life quickly verified this plan 🙃. I did eventually start some p...
www.bwplotka.dev
November 18, 2025 at 7:33 AM
Just gave lazygit a try and wow I could see all my staging, branching, & commits now in one slick TUI. If you still type everything manually, you might want to give this a try.
Thought it was weird, but it might make sense. AI is so disruptive in delivering results way faster than before, augmenting developers to solve more problems in a shorter time. Companies would encourage and reward employees that do take advantage of this.
Meta is about to start grading workers on their AI skills
Meta employee performance will be assessed by AI-driven impact starting in 2026, as the company prioritizes AI adoption across its workforce.
www.businessinsider.com
November 16, 2025 at 9:29 PM
Thought it was weird, but it might make sense. AI is so disruptive in delivering results way faster than before, augmenting developers to solve more problems in a shorter time. Companies would encourage and reward employees that do take advantage of this.
Lots of companies are putting UI on top of LLM text so users can digest information more easily. It makes responses feel less intimidating. Normal websites could benefit from the same idea since every user is looking for something slightly different.
www.thesys.dev
www.thesys.dev
November 16, 2025 at 8:59 PM
Lots of companies are putting UI on top of LLM text so users can digest information more easily. It makes responses feel less intimidating. Normal websites could benefit from the same idea since every user is looking for something slightly different.
www.thesys.dev
www.thesys.dev
50% more usage on codex and a new codex-mini!
OpenAI is cooking
OpenAI is cooking
November 7, 2025 at 6:50 PM
50% more usage on codex and a new codex-mini!
OpenAI is cooking
OpenAI is cooking
If you use shadcn but don't know already, they have an MCP server so your AI can know what components you have available in the registry, fetch their documentations, and install the components. With the right prompt it can get you 80% of the way.
November 5, 2025 at 6:51 PM
If you use shadcn but don't know already, they have an MCP server so your AI can know what components you have available in the registry, fetch their documentations, and install the components. With the right prompt it can get you 80% of the way.
Just discovered TypeGPU. It's a TypeScript-first way to write GPU shaders and compute pipelines.
You stay in TypeScript, it auto-generates WGSL for WebGPU. 🔥
Perfect for experimenting with rendering, compute, and even AI inference in the browser.
docs.swmansion.com/TypeGPU/exam...
You stay in TypeScript, it auto-generates WGSL for WebGPU. 🔥
Perfect for experimenting with rendering, compute, and even AI inference in the browser.
docs.swmansion.com/TypeGPU/exam...
November 4, 2025 at 11:16 PM
Just discovered TypeGPU. It's a TypeScript-first way to write GPU shaders and compute pipelines.
You stay in TypeScript, it auto-generates WGSL for WebGPU. 🔥
Perfect for experimenting with rendering, compute, and even AI inference in the browser.
docs.swmansion.com/TypeGPU/exam...
You stay in TypeScript, it auto-generates WGSL for WebGPU. 🔥
Perfect for experimenting with rendering, compute, and even AI inference in the browser.
docs.swmansion.com/TypeGPU/exam...
After Apple Music Web was written in Svelte, the new App Store Web is also in Svelte!
Apple really likes Svelte for their web. They used to mention React and Angular in their job postings but not sure where those are used.
Apple really likes Svelte for their web. They used to mention React and Angular in their job postings but not sure where those are used.
November 4, 2025 at 7:45 PM
After Apple Music Web was written in Svelte, the new App Store Web is also in Svelte!
Apple really likes Svelte for their web. They used to mention React and Angular in their job postings but not sure where those are used.
Apple really likes Svelte for their web. They used to mention React and Angular in their job postings but not sure where those are used.
You probably need this.
OpenAI has doc on what prompts you can have or should use for different roles. Besides email drafts or meeting summary, you can compare vendors as IT or brainstorm and visualize marketing campaign ideas.
academy.openai.com/home/clubs/w...
OpenAI has doc on what prompts you can have or should use for different roles. Besides email drafts or meeting summary, you can compare vendors as IT or brainstorm and visualize marketing campaign ideas.
academy.openai.com/home/clubs/w...
October 5, 2025 at 7:43 PM
You probably need this.
OpenAI has doc on what prompts you can have or should use for different roles. Besides email drafts or meeting summary, you can compare vendors as IT or brainstorm and visualize marketing campaign ideas.
academy.openai.com/home/clubs/w...
OpenAI has doc on what prompts you can have or should use for different roles. Besides email drafts or meeting summary, you can compare vendors as IT or brainstorm and visualize marketing campaign ideas.
academy.openai.com/home/clubs/w...
This is definitely exciting. A new contender in React meta frameworks. I haven’t dug into it yet but would check it out soon to compare the DX with Next.js
TanStack Start v1 Release Candidate | TanStack Blog
TanStack Start has officially reached a v1.0 Release Candidate. This is the build we expect to ship as 1.0, pending your final feedback, docs polish, and a few last-mile fixes. Now’s the perfect time....
tanstack.com
September 24, 2025 at 7:51 AM
This is definitely exciting. A new contender in React meta frameworks. I haven’t dug into it yet but would check it out soon to compare the DX with Next.js
This component library gives me Starcraft vibe crafting all those shapes in SVG giving you a retro space touch. If your project matches the vibe, this might be for you.
www.cosmic-ui.com
www.cosmic-ui.com
September 23, 2025 at 5:45 PM
This component library gives me Starcraft vibe crafting all those shapes in SVG giving you a retro space touch. If your project matches the vibe, this might be for you.
www.cosmic-ui.com
www.cosmic-ui.com
In light of recent npm incidents, I've written a post on what supply-chain attacks is and some quick tips on how you can protect yourself.
npm Supply-Chain Attacks: 60-Second Protection Checklist
In light of recent npm supply-chain attacks, here is a quick 60-second checklist you can do to protect yourself.
beyondwebnewsletter.dev
September 23, 2025 at 4:44 PM
In light of recent npm incidents, I've written a post on what supply-chain attacks is and some quick tips on how you can protect yourself.
Apple has a custom CSS property to apply Liquid Glass but it's private. Got excited thinking I could just use it.
-apple-visual-effect: -apple-system-glass-material;
-apple-visual-effect: -apple-system-glass-material;
Apple has a private CSS property to add Liquid Glass effects to web content
I have an incredibly boring summer hobby: looking at the changelog for the WebKit Github repo. Why? Because I spend a chunk of my professional life working with webviews inside mobile apps and I like ...
alastair.is
September 18, 2025 at 4:22 AM
Apple has a custom CSS property to apply Liquid Glass but it's private. Got excited thinking I could just use it.
-apple-visual-effect: -apple-system-glass-material;
-apple-visual-effect: -apple-system-glass-material;
I like how there is an AI model for everyone.
“Omg Claude Code just one shot my feature”
“Thank you Codex for fixing the bug I’ve spent days on”
Choose the model and tool that suit you.
“Omg Claude Code just one shot my feature”
“Thank you Codex for fixing the bug I’ve spent days on”
Choose the model and tool that suit you.
September 17, 2025 at 2:20 AM
I like how there is an AI model for everyone.
“Omg Claude Code just one shot my feature”
“Thank you Codex for fixing the bug I’ve spent days on”
Choose the model and tool that suit you.
“Omg Claude Code just one shot my feature”
“Thank you Codex for fixing the bug I’ve spent days on”
Choose the model and tool that suit you.
🚨 The Tinycolor package was compromised in a supply chain attack.
It uses a postinstall hook in package.json to run a malicious script that steals secrets from your computer and sends them to a hardcoded URL.
socket.dev/blog/tinycol...
It uses a postinstall hook in package.json to run a malicious script that steals secrets from your computer and sends them to a hardcoded URL.
socket.dev/blog/tinycol...
Popular Tinycolor npm Package Compromised in Supply Chain At...
Malicious update to @ctrl/tinycolor on npm is part of a supply-chain attack hitting 40+ packages across maintainers
socket.dev
September 16, 2025 at 6:48 AM
🚨 The Tinycolor package was compromised in a supply chain attack.
It uses a postinstall hook in package.json to run a malicious script that steals secrets from your computer and sends them to a hardcoded URL.
socket.dev/blog/tinycol...
It uses a postinstall hook in package.json to run a malicious script that steals secrets from your computer and sends them to a hardcoded URL.
socket.dev/blog/tinycol...
🚨🚨🚨
New incident of libraries containing malware. This feels like a weekly thing now.
github.com/valor-softwa...
New incident of libraries containing malware. This feels like a weekly thing now.
github.com/valor-softwa...
Newly published NPM versions contain malware · Issue #6776 · valor-software/ngx-bootstrap
Recently published versions 20.0.4, 20.0.5, 20.0.6, 19.0.3 and 18.1.4 contain a post-install script bundle.js that seems to pull various tokens (GitHub, NPM, AWS, GCP) and attempts to exfiltrate cl...
github.com
September 15, 2025 at 8:47 PM
🚨🚨🚨
New incident of libraries containing malware. This feels like a weekly thing now.
github.com/valor-softwa...
New incident of libraries containing malware. This feels like a weekly thing now.
github.com/valor-softwa...
OpenAI released a new model, GPT-5-Codex, on Monday for agentic work.
It claims superior performance over GPT-5, with higher benchmark scores, improved refactoring accuracy, and enhanced frontend capabilities. I'll need a project to verify the frontend claims.
It claims superior performance over GPT-5, with higher benchmark scores, improved refactoring accuracy, and enhanced frontend capabilities. I'll need a project to verify the frontend claims.
September 15, 2025 at 6:23 PM
OpenAI released a new model, GPT-5-Codex, on Monday for agentic work.
It claims superior performance over GPT-5, with higher benchmark scores, improved refactoring accuracy, and enhanced frontend capabilities. I'll need a project to verify the frontend claims.
It claims superior performance over GPT-5, with higher benchmark scores, improved refactoring accuracy, and enhanced frontend capabilities. I'll need a project to verify the frontend claims.