Topic

#Javascript

29 articles on Javascript — news, releases, guides and analysis from the SourceFeed engine.

Tutorial 3d ago 0

Write a Custom ESLint Plugin to Enforce Your Team's Coding Standards

Build, test, and ship an ESLint rule that blocks your team's anti-patterns at commit time.

Lenn Voss

Adform's Breach Made the Ad Tracker the Malware

A trojanized trackpoint-async.js swapped crypto wallet addresses across thousands of sites while every scanner called it clean.

Article · 1w ago2

Shai-Hulud Returns, and Provenance Signed the Malware

The worm behind the keyv compromise rode a legitimate GitHub Actions pipeline straight past npm's newest defenses.

Article · 1w ago5

Web Components Finally Learn Progressive Enhancement

A 2.9kB library named Elena bets your design system belongs to the platform, not the framework.

Article · 1w ago0

Your Best npm Defense Is Waiting 24 Hours

Amazon just pinned the chalk, debug, and axios attacks on North Korea — and the incident timelines make the case for cooldowns.

Article · 1w ago0

Build a Voice Assistant with the OpenAI Realtime API and WebRTC

Wire a browser to gpt-realtime-2.1 over WebRTC for interruptible voice chat with function calling.

Tutorial · 2w ago0

htmx 4.0 Ships on Game Boy Before It Ships on npm

The cartridge is a real playable game, and the rewrite it's teasing deserves more attention than the meme.

Article · 2w ago0

npm's Cooldown Works Because You Never Vetted Anything

The security-theater critique misreads who actually catches registry malware — but it's right about what attackers do next.

Article · 3w ago0

Primate Owns the Stack Without Owning You

A universal framework that mixes React, Svelte, Go, and Bun under one model. Real idea, early ecosystem.

Article · 4w ago2

Telegram Serverless Cuts the Bot Hosting Tax

Co-located V8 isolates and a built-in SQLite store rewrite how Telegram bots get backends.

Article · 4w ago1

Bun's All-in-One Toolchain Is Ready for Work

The runtime, package manager, and test runner now form a practical daily stack for Node-shaped projects.

Article · 4w ago5

Master Chrome DevTools for JavaScript Debugging

Fix a real NaN bug and a real CPU freeze in a tiny demo app, using only the Sources, Network, and Performance panels.

Tutorial · 4w ago1

Vanilla JS Still Wins the Complexity Budget

Modern browsers closed the old gaps. Frameworks still cost real money in size, churn, and cognitive load.

Article · 1mo ago0

Hand-Rolling OAuth 2.0 Authorization Code + PKCE in a React SPA

Build a React login flow against Auth0 using Authorization Code + PKCE, with no SDK doing the work for you and no client secret anywhere in the browser.

Tutorial · 1mo ago0

Ant: A Custom-Engine JavaScript Runtime for the Edge

A lightweight, C-based runtime challenges V8 and JavaScriptCore hegemony in resource-constrained environments.

Article · 1mo ago0

Why AI Editors Keep Generating Prototype Pollution Vulnerabilities

Recursive merge helpers generated by AI tools frequently lack basic security guards, exposing JavaScript applications to prototype pollution.

Article · 1mo ago0