Lightnews — Scholar-powered news

Reposted by TypeScript.fm

Kamran Ayub @kamranicus.com · 2d

Alrighty, since the prototype works now in dev mode, prod mode, under SSR, with calling into .NET, I've made the repo public just for fun. There is no public API yet, and it's not wrapped up into its own package. But you can see how it works at least!

PS. Don't use it!

github.com/kamranayub/d...

GitHub - kamranayub/dotnet-ssr: .NET as an SSR runtime for JS Frameworks

.NET as an SSR runtime for JS Frameworks. Contribute to kamranayub/dotnet-ssr development by creating an account on GitHub.

github.com

1 1 2

Reposted by TypeScript.fm

Socket @socket.dev · 6d

🎙️ Socket CEO @feross.bsky.social breaks down the recent npm attacks on the PodRocket podcast: phishing campaigns, AI-weaponized exploits, the Shai-Hulud worm, GitHub Actions flaws, and more.

Essential listening for JS devs concerned about supply chain security in 2025.
socket.dev/blog/podrock...

PodRocket Podcast: Inside the Recent npm Supply Chain Attack...

Socket CEO Feross Aboukhadijeh discusses the recent npm supply chain attacks on PodRocket, covering novel attack vectors and how developers can protec...

socket.dev

2 3

Reposted by TypeScript.fm

Sveltia CMS @sveltiacms.app · 7d

Check out Sveltia CMS, the modern successor to Decap CMS!

GitHub - sveltia/sveltia-cms: Netlify/Decap CMS successor. Fast, lightweight, Git-based headless CMS. Modern UX, first-class i18n support, mobile support + 100s of improvements. Framework-agnostic, op...

Netlify/Decap CMS successor. Fast, lightweight, Git-based headless CMS. Modern UX, first-class i18n support, mobile support + 100s of improvements. Framework-agnostic, open source & free. - sve...

github.com

2 1 2

Reposted by TypeScript.fm

CyleWaitForIt @cylewaitfor.it · 8d

Similar to PagesCMS is decapcms.org it has been around for a bit and started originally at Netlify as NetlifyCMS

Decap CMS | Open-Source Content Management System

Open source content management for your Git workflow

decapcms.org

1 1 1

Reposted by TypeScript.fm

David Brownman @xavd.id · 8d

They talked about my recent TypeScript blog post in this episode. It's a cool listen!

TypeScript.fm @typescript.fm · 8d

Today on the pod, TS 6.0 defaults, fresh ECMAScript proposals (no frozen privates, Array.pushAll, iterator chunking), Cap'n Web RPC, Python kwargs in TS, and running TS on DOS (and PlayStation?)!

share.transistor.fm/s/db6f3035

#typescript

New ECMAScript Proposals, Cap'n Web, and TS on DOS/PlayStation | News | Ep 37 | TypeScript.fm - The Friendly Show for TypeScript Developers | Episode 37

News of the week of September 22, 2025: new default option in TS 6.0, Jiti upgrade, and Cloudflare's on a tear. Plus, npm's security roadmap. From the community: Python-style kwargs, running TS on MS-DOS,...

share.transistor.fm

2 9

Reposted by TypeScript.fm

Excalibur.js @excaliburjs.com · 7d

⚔️🔥Excalibur v0.31.0 is out! TypeScript Game Engine!

Tons of new features, QOL, and fixes! Now with NPM Provenance!

* New SoundManager for managing groups of audio
* ECS query enhancement for "all", "any", and "not" querys
* Animation data storage
* EX Playground!
* Dev Containers!
* And lots more!

1 3 3

TypeScript.fm @typescript.fm · 8d

Community highlights ✨

- @robpalmer.bsky.social on fresh ECMAScript proposals
- @pi0.io announces Jiti 2.6 perf improvements
- @jasnell.me on Cloudflare's Node.js compatibility improvements
- @xavd.id explains Python-style kwargs in TS
- @stefanjudis.com shares tiny-helpers.dev tools

2

TypeScript.fm @typescript.fm · 8d

Today on the pod, TS 6.0 defaults, fresh ECMAScript proposals (no frozen privates, Array.pushAll, iterator chunking), Cap'n Web RPC, Python kwargs in TS, and running TS on DOS (and PlayStation?)!

share.transistor.fm/s/db6f3035

#typescript

New ECMAScript Proposals, Cap'n Web, and TS on DOS/PlayStation | News | Ep 37 | TypeScript.fm - The Friendly Show for TypeScript Developers | Episode 37

News of the week of September 22, 2025: new default option in TS 6.0, Jiti upgrade, and Cloudflare's on a tear. Plus, npm's security roadmap. From the community: Python-style kwargs, running TS on MS-DOS,...

share.transistor.fm

1 2 7

TypeScript.fm @typescript.fm · 13d

Glad you enjoyed the show!

1

Reposted by TypeScript.fm

Andrew Jarrett @ahrjarrett.bsky.social · 13d

This afternoon I was listening to @typescript.fm and was surprised to hear @traversable/valibot mentioned 🤩

As a long time fan of the podcast, this was super fun.

1 1 1

Reposted by TypeScript.fm

The Angular Plus Show @theangularplusshow.bsky.social · 14d

Today on the A+ Show David Blass shares how Arktype makes TypeScript validation effortless, how AI supports its growth, and why the Standard Schema matters—along with tips for building tools! #ngconf #Angular

🍎 apple.co/42c5j5n
🟢 bit.ly/428fI1Y

2 1

TypeScript.fm @typescript.fm · 15d

Community highlights ✨

- @squiggleconf.com happened!
- @brianmuenzenmeyer.com shares pure TS GitHub Actions
- @azraelsec.sh type branding ELI5
- @evanhahn.com don't use ts-ignore
- Matt Brown explains using Node's Test Runner with TypeScript & React
- Motion AI on why they're moving off of TS

2 5

TypeScript.fm @typescript.fm · 15d

Today on the pod: Shai-Hulud attack on npm, WebAssembly 3.0, type branding and tuple techniques, what to use instead of @ts-ignore, and discussing Motion's move off of TS for their backend

share.transistor.fm/s/47197c83

#typescript

Let the Spicy Takes Flow: Shai-Hulud Hits npm, Motion's TS Exodus | News | Ep 36 | TypeScript.fm - The Friendly Show for TypeScript Developers | Episode 36

News of the week of September 15, 2025: Shai-Hulud worm hits npm supply chain, WebAssembly 3 spec is ratified, and Elixir fans finally get their time in the spotlight. From the community: SquiggleConf...

share.transistor.fm

2 2 6

Reposted by TypeScript.fm

Excalibur.js @excaliburjs.com · 16d

🧱 Excalitris! A brand new Excalibur tetris-like sample is live! Check it out now! You can even do vim motions! Thanks to @chrisk-7777.bsky.social

Did you know you can do game dev with TypeScript?

Play: excaliburjs.com/sample-excal...

Repo: github.com/excaliburjs/...

#typescript #gamedev #tetris

4 14

Reposted by TypeScript.fm

Alexander Lichter @thealexlichter.com · 20d

tsgolint mentioned during @jakebailey.dev's talk about ts-go at @squiggleconf.com ✅

If you didn't try it out, time to jump into type-aware linting with Oxlint. 👀

oxc.rs/docs/guide/u...

SquiggleConf screen showing "tsgolint" - "30x faster typed linting" with a link and stats from the README

4 24

Reposted by TypeScript.fm

VoidZero @voidzero.dev · 20d

To everyone attending @squiggleconf.com in the next two days - enjoy two days packed with knowledge around Web Dev Tooling.

Proud to support the non-profit conference 🙏🏻

Start of SquiggleConf with a shoutout to their sponsors Bloomberg, Mintlify, Progress, elastic, igalia, rushstack and VoidZero.

1 3 20

Reposted by TypeScript.fm

Kathryn Grayson Nanz @kgrayson.com · 20d

Good morning from @squiggleconf.com! First talk was already so, so good.

It feels like such a treat to just get to attend a conference and not have to speak or work a booth, haha 😅

A picture of the stage at SquiggleConf showing the title of Anthony Fu's talk ("Make Tools That People Love") while he is interviewed by the host

1 3 15

TypeScript.fm @typescript.fm · 20d

ICYMI: @squiggleconf.com Is live right now! Be sure to rewind and catch @jakebailey.dev's talk on porting TypeScript to GO!!!

#typescript

youtube.com/live/C_ePbVZqXrw?si=yv-qp9GRYd_L6yHb

SquiggleConf 2025 - Day 1

YouTube video by SquiggleConf

youtube.com

2 6

Reposted by TypeScript.fm

David Blass @ssalbdivad.dev · 20d

had an amazing time with @typescript.fm.

if you're interested in a deep-dive on typescript validation and @arktype.io, this is for you! 👇

TypeScript.fm @typescript.fm · 20d

Today on the pod, learn how ArkType's 1:1 validator provides soundness guarantees beyond vanilla TypeScript, with type-level parsing & JIT optimization!

share.transistor.fm/s/8f206643

#typescript

ArkType is TypeScript's 1:1 Validator | David Blass | Ep 35B | TypeScript.fm - The Friendly Show for TypeScript Developers | Episode 35

David Blass (@ssalbdivad.dev) teaches the two fools about ArkType and its 1:1 validator type system. If you, like us, thought ArkType was only about validation, think again! David pulls back the curtain...

share.transistor.fm

2 7

TypeScript.fm @typescript.fm · 20d

Today on the pod, learn how ArkType's 1:1 validator provides soundness guarantees beyond vanilla TypeScript, with type-level parsing & JIT optimization!

share.transistor.fm/s/8f206643

#typescript

ArkType is TypeScript's 1:1 Validator | David Blass | Ep 35B | TypeScript.fm - The Friendly Show for TypeScript Developers | Episode 35

David Blass (@ssalbdivad.dev) teaches the two fools about ArkType and its 1:1 validator type system. If you, like us, thought ArkType was only about validation, think again! David pulls back the curtain...

share.transistor.fm

1 1 4

Reposted by TypeScript.fm

daniel at ⚡ viteconf 🇳🇱 @danielroe.dev · 22d

in light of the current supply chain attacks, I've just published a @github.com action to detect packages that _lose_ their provenance.

📦 supports pnpm-lock.yaml, package-lock.json, yarn.lock (v1)
🎨 inline GitHub annotations
✅ JSON output + configurable
💪 published in TS with zero deps

GitHub - danielroe/provenance-action: GitHub Action that detects dependency provenance downgrades from lockfile changes (npm/pnpm/yarn).

GitHub Action that detects dependency provenance downgrades from lockfile changes (npm/pnpm/yarn). - danielroe/provenance-action

github.com

5 32 150

Reposted by TypeScript.fm

pnpm @pnpm.io · 23d

Published an article about mitigating supply chain attacks with pnpm
pnpm.io/supply-chain...

Mitigating supply chain attacks | pnpm

Sometimes npm packages are compromised and published with malware. Luckily, there are companies like [Socket], [Snyk], and [Aikido] that detect these compromised packages early. The npm registry usually removes the affected versions within hours. However, there is always a window of time between when the malware is published and when it is detected, during which you could be exposed. Fortunately, there are some things you can do with pnpm to minimize the risks.

pnpm.io

12 54

Reposted by TypeScript.fm

SquiggleConf @squiggleconf.com · 22d

Two more days until SquiggleConf 2025! Wow!

We're so pumped to welcome you all to the Simons Theater at the New England Aquarium. See you soon! 🥰

4 8

TypeScript.fm @typescript.fm · 22d

Community Highlights ✨

- @jviide.iki.fi shares pnpm's new minimumReleaseAge security feature
- @joshuakgoldberg.com is tracking common rules across linters for Flint
- @daspr.id made taxum, a TypeScript-first HTTP framework
- @alex.pink made ConfKit, a type-safe config and secret lib

Big thanks!

1 4

TypeScript.fm @typescript.fm · 22d

Today on the pod: Deno 2.5's DX improvements, type-safe config and form tools, and we discuss underrated TS features!

share.transistor.fm/s/5caca6b3

#typescript

Deno 2.5, Type-safe Configs and Forms, and Underrated TS Features | News | Ep 35 | TypeScript.fm - The Friendly Show for TypeScript Developers | Episode 35

News of the week of September 8, 2025: Deno 2.5 adds a bunch of DX improvements, Fresh 2.0 is out of beta, and a supply chain attack mitigation for pnpm users. From the community: Val Town's OSS TypeScript...

share.transistor.fm

1 1 6