The JavaScript Registry makes building, sharing, and using JavaScript packages simpler and more secure, and you can use it with or without NPM. WebAssembly runtime introduces experimental async API ...

TanStack tightens security measures after supply chain attacks. Pull requests may soon only be possible by invitation.

Peter looks at Knockout, one of the MVC environments for writing client-side JavaScript, and wonders if we're on the wrong path. The typical interweaving of code and presentation logic in JavaScript ...

Picking a JavaScript framework in 2026 is not the casual decision it was a decade ago. The framework you choose today will ...

Anthropic acquired SDK startup Stainless, signaling a deeper push into developer tooling as AI labs compete beyond model ...

Salesforce is opening its platform to React developers. The Multi-Framework beta lets developers build native Salesforce apps with React while using Salesforce authentication, security, governance, ...

TanStack has released a detailed postmortem describing a sophisticated supply-chain attack that compromised 42 npm packages ...

Numerous TanStack packages on npm have suffered a supply chain attack, apparently as part of the “Mini Shai-Hulud” attack ...

Kiro, Spec Kit, Tessl, and Zenflow offer a more systematic and structured approach to developing with AI agents than vibe ...

AI tools can build websites fast, but Mueller says they won't set up your canonicals, sitemaps, or robots.txt unless you tell ...

GitHub has introduced a significant update to its CodeQL engine, enabling developers to define custom sanitizers and ...