pnpm 11.7: frozenStore, Batch Publish, and Scope Auth Tokens
pnpm 11.7 ships frozenStore for read-only Nix and OCI installs, atomic batch publishing for monorepos, and per-scope auth tokens for multi-org GitHub Packages ...
React Router v8: ESM-Only, Middleware On, Node 22 Now
React Router v8 landed on June 17. It requires Node 22, ships ESM only, and ...
TanStack AI Beta: Code Mode, Middleware, and MCP Are Here
TanStack AI hits Beta with Code Mode sandbox execution, middleware, and host-side MCP. Here's what ...
Node.js Patches 12 CVEs — Two Auth Bypasses to Fix Now
Node.js patched 12 vulnerabilities on June 18, including two HIGH-severity bugs: a WebCrypto process crash ...
Bun’s new Thread() PR: JS Gets True Multithreading
Bun opened a 60K-line PR adding shared-memory threads to JavaScriptCore. It may never merge. Here ...
TypeScript 7.0 RC Ships: VS Code Build Drops From 77s to 7s
TypeScript 7.0 Release Candidate is here. The Go-based compiler cuts VS Code type-checks from 77.8 seconds to 7.5. Here is what breaks, what ...
Node.js 26.3.1, 24.17.0, 22.23.0: Four CVEs to Patch Now
Node.js shipped security patches for all active release lines today. Two HIGH-severity CVEs — TLS ...
144 Mastra npm Packages Backdoored: What to Check Right Now
144 @mastra npm packages were compromised today via a hijacked contributor account and typosquatted easy-day-js ...
That LinkedIn Job Offer Hid a Backdoor in npm install
A developer almost got owned by a LinkedIn recruiter's GitHub repo. The backdoor was in ...
Deno 2.8: Six New Subcommands That Replace Your npm Toolchain
Deno 2.8 ships deno transpile, deno ci, deno why, deno audit fix, deno pack, and ...