🗞 Issue 18 / 01.07.2023


📄 A Massive Bug at the Heart of the npm Ecosystem

“This is a doozy,” says the author, who used to work on the npm CLI team. We don’t want to spoil his story too much, but in short, package manifests and actual package contents don’t necessarily match up and this can be manipulated by bad actors and even trip up auditing tools.

DARCY CLARKE


🎬 The Cost of JavaScript in 2023

Esteemed Googler and Web performance expert Addy Osmani always brings a full, holistic view of problems and solutions to his talks, and this is no exception. He talks about the various ways JS apps are delivered and rendered, the constraints of the hardware involved, and techniques you can use to keep things running smoothly.

ADDY OSMANI

💡 I know many readers dislike videos, but no word of a lie, this is a mini masterclass in numerous modern JS and webperf topics and worth saving for later.


©️JS WEEKLY

📒 ARTICLES & TUTORIALS


📃 Don't Write Console Logs Yourself Ever Again

We all use console.log and we’ll probably use it forever, but Amit says we can save time by using the Turbo Console Log extension for VS Code to at least insert the console.log statements for us..

AMIT MERCHANT


📃 An Introduction to Parser Combinators

Parsing is rarely exciting, but Varun has done a fantastic job of making an engaging tutorial for a dry, yet extremely useful, topic. This is the bare basics, but I hope we can encourage him to finish the series :-)

VARUN RAMESH

Build and Deploy a Fullstack Reddit Clone: Next.js 13, React, Tailwind, Auth, Prisma, MySQL

Josh tried coding

High-school student makes React a million times faster

🔥Fireship

Million on GitHub
Million.js Website

Many are not aware of the power of JavaScript

Harsha Vardhan

🗞 Issue 19 / 05.07.2023


📄 RegExp's v Flag with Set Notation and Properties of Strings

The capability of regexes in Node has been turned up a few notches, especially in the support for, and manipulation of, Unicode character sets (for example, you can now do things like 'match all Greek symbols except π'). The post is from 2022 but we’ve been sitting on it as it’s taken till now for it to be supported.

DAVIS, SCHERER. AND BYNENS


📄 Setting Expectations for the Node.js Test Runner

An update on Node’s new test runner (stable since Node 20.0) from a TSC and core team member. He explains why an official test runner was introduced and how it tries to strike a balance between being powerful and minimal.

COLIN J. IHRIG


📄 Tangerine: DNS over HTTPS for Node.js

A drop-in replacement for dns.promises.Resolver that uses Undici to perform DNS requests over HTTPS, complete with built-in retries, timeouts, caching, and the ability to abort requests.

FORWARD EMAIL


©️NODE.JS WEEKLY

ASIDES

📜Deno: An interesting take on Node’s default module system, covering its history, its shortcomings, and the trickiness of managing both CommonJS and ES modules at once. Unsurprisingly, Andy wants us aboard the ESM train ASAP and to leave CommonJS at the station.

📜 TypeScript 5.2 is now in beta.

📜 There's a new release of alternative JS runtime, Bun: Bun 0.6.12. Guess what? Yes, more Node.js compatibility improvements!

📜 A walkthrough of ways to run 'cron' style scheduled jobs in Node that ultimately promotes the author's own company, but is a reasonable roundup nonetheless.

📜 Liran Tal explains why to avoid Fastify's reply.raw and reply.hijack and shares an alternative approach.