Awesome JavaScript Weekly

Popular News and Articles

• 
  TanStack packages were compromised in a mass npm supply chain attack today

  safedep.io
• 
  BlueJS - Compile JavaScript to 1.2MB native binaries (no V8)

  bluejs.dev
• 
  JavaScript has no reliable tail call optimization: here is what actually happens at runtime and what to do instead

  blog.gaborkoos.com
• 
  

  Sponsored
  SaaSHub - Software Alternatives and Reviews

  SaaSHub helps you find the best software and product alternatives   » Learn more
  

  www.saashub.com

• 
  PSA: How to set minimum release age for your package manager (they all do it differently)

  lemmy.zip
• 
  Out with the JavaScript, in with the HTML

  blog.jim-nielsen.com
• 
  turned my website’s procedural backgrounds into a standalone vanilla js engine.

  substrate.ujjwalvivek.com
• 
  Try LispE in the Browser

  naver.github.io
• 
  Mini Shai-Hulud npm worm compromises 160+ packages, including TanStack-related packages

  thecybersecguru.com
• 
  Postmortem: TanStack npm supply-chain compromise

  tanstack.com
• 
  JavaScript server-side interoperability with rcompat

  bytecode.news

Trending libraries and projects

• ECC

  The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.

  
• get-shit-done

  » meta-prompting    » claude-code

  A light-weight and powerful meta-prompting, context engineering and spec-driven development system for Claude Code by TÂCHES.

  
• twake-drive

  Twake Drive Web App

  
• no-as-a-service

  » API    » JSON

  No-as-a-Service (NaaS) is a simple API that returns a random rejection reason. Use it when you need a realistic excuse, a fun “no,” or want to simulate being turned down in style.

  
• keyFinder

  » JavaScript    » Security

  Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.