Worrying about the npm ecosystem

Sam Bleckley: The npm ecosystem seems unwell. If you are concerned with security, reliability, or long-term maintenance, it is almost impossible to pick a suitable package to use — both because there are 1.3 million packages available, and even if you ... more

The Changelog 400: Big updates in Safari 14

We’re joined by Ronak Shah and Beth Dakin from the Safari team at Apple about their announcements at WWDC20 and the release of Safari 14. We talk about Safari WebExtensions, Face ID and Touch ID coming to the web, Safari’s plans to advance the web platform, ... more

Learn regular expressions with simple interactive exercises

RegexOne is a free resource to learn regular expressions with interactive exercises. Learn how to match/exclude specific characters, character ranges, match groups/emails/HTML/filenames, trim whitespace, or get specific to languages like C#, Javascript, ... more

Create and animate hand-drawn annotations on a web page

Rough Notation uses RoughJS to create a hand-drawn look and feel. Elements can be annotated in a number of different styles. Animation duration and delay can be configured, or just turned off. Follow the headline link to see it in action on the project’s ... more

Making Vue 3

Evan You writes up lessons learned from rewriting the next major version of Vue.js. Two key considerations led us to the new major version (and rewrite) of Vue: First, the general availability of new JavaScript language features in mainstream browsers. ... more

Today’s JavaScript, from an outsider’s perspective

Lea Verou shared this story of using Javascript for the first time… Today I tried to help a friend who is a great computer scientist, but not a JS person use a JS module he found on Github. Since for the past 6 years my day job is doing usability research ... more

The Changelog 396: De-Google-ing your website analytics

Plausible creators Uku Täht and Marko Saric join the show to talk about their open source, privacy-friendly alternative to Google Analytics. We talk through the backstory of the project, why it’s open source, the details behind a few viral blog posts ... more

Preview minimal CSS frameworks with this drop-in switcher

Minimal CSS “frameworks” are on the rise. There are so many of them now that it’s hard to compare apples to apples. This’ll help. This is a quick drop-in CSS switcher to allow for previewing some of the many minimal CSS-only frameworks that are available. ... more

The third age of JavaScript

Every 10 years there is a changing of the guard in JavaScript. I think we have just started a period of accelerated change that could in future be regarded as the Third Age of JavaScript. Discuss on Changelog News ... more

Improving your page load speeds on any site with Turbolinks

Nick does a great job with these videos. If you’ve never given Turbolinks a serious look, this would be 20 minutes well spent. We’ve been using Turbolinks for 4+ years now with great success. Discuss on Changelog News ... more

JS Party 127: A visit to Deno Land

Divya and Nick welcome Deno’s Kit Kelly to the show to celebrate the highly-anticipated new JavaScript/TypeScript runtime’s big 1.0 release. This is a wide-ranging discussion about all things Deno. We discuss why they’re using Rust, how they’re rewriting ... more

JS Party 125: These buttons look like buttons

This week Feross and Emma chat with Segun Adebayo about Chakra UI, a modular React component library that’s changing the game for design systems and app development. Discuss on Changelog News Sponsors Rollbar – We move fast and fix things because of ... more

The cost of JavaScript frameworks

We all know our users pay a cost when we push our JS framework in to their browser. Now, thanks to Tim Kadlec doing the yeoman’s work of crunching the numbers, we can approximate just how much that cost really is. There is no faster (pun intended) way ... more

Node.js 14 arrives with diagnostic reporting, local storage

The New Stack with a nice rundown of what’s new/noteworthy in Node 14. The once-an-npm-package node-report is now mainlined, an experimental AsyncLocalStorage API has been added, and more. Discuss on Changelog News ... more

In-demand tech skills for remote developers right now

To help you succeed as a remote programmer, here at CV Compiler, we analyzed about 1,000 remote vacancies, (~330 job listings for each group), to define the tech skills employers are demanding from remote developers right now . Frontenders oughtta know ... more

A design system for building faithful recreations of Windows 98 UIs

98.css is a CSS file that takes semantic HTML and makes it look pretty. It does not ship with any JavaScript, so it is compatible with your frontend framework of choice. What’s old is new again! See it in use with React right here. Discuss on Changelog ... more

CLUI is a collection of JS libs for building CLIs with context-aware autocomplete

These libraries come from the team at repl.it and you can play with them in your browser on repl.it. Discuss on Changelog News ... more

Vuln Cost – an open source security scanner for VS Code

Find security vulnerabilities in open source npm packages while you code. Receive feedback in-line with your code, such as how many vulnerabilities a package contains that you are importing. Inspired by Import Cost Discuss on Changelog News ... more

JS Party 123: JS "Danger" Party

Our Jeopardy-style (but don’t call it Jeopardy) game is back! This time Jerod plays the part of Alex Trabeck and Emma tries her hand at contestant-ing. Can Scott Tolinski from the Syntax podcast hang with Emma and Nick? Listen and play along! Discuss ... more

Simulating a virus outbreak with JavaScript

Jack builds on this post from Harry Stevens on The Washington Post to create an interactive virus outbreak simulator with JavaScript, HTML5, and Canvas . It simulates the effectiveness of lockdowns, social distancing, PPE, and more. Jack shares the code ... more

PostCSS 8.0 is coming. Here’s what it brings

Andrey Sitnik: PostCSS, the framework for processing CSS with JavaScript that I started building while working at Evil Martians, has been around since 2013. With 100+ million downloads a month, it quietly tops the charts of most popular front-end tools. ... more

Common tasks of managing the DOM with vanilla JavaScript

Even with the proliferation of modern UI tools like React, Vue, etc. you still have times when dealing directly with the DOM is a must. When that time comes, this site will help you get things done with explanations and code samples for common tasks. ... more

Scan your Elixir project's dependencies for known vulnerabilities

MixAudit provides a mix deps.audit task to scan Mix dependencies for security vulnerabilities. It draw its inspiration from tools like npm audit and bundler-audit. Vulns sourced from the community-maintained elixir-security-advisories. Discuss on Changelog ... more

Stanford CS253: Web Security

Hey folks! Feross from JS Party here. I taught a course on web security last quarter at Stanford. All the course materials, slides, and videos are freely available online and I wanted to share with the broader community, in case anyone is interested ... more

GitHub is acquiring npm

This.. is a bit of a bombshell: The work of the npm team over the last 10 years, and the contributions of hundreds of thousands of open source developers and maintainers, have made npm home to over 1.3 million packages with 75 billion downloads a month. ... more

JS Party 118: "I do, we do, you do"

This week we’re talking about building technical courses! From video courses to written courses, we’ll give you our tips for building an effective and memorable course. Discuss on Changelog News Sponsors DigitalOcean – DigitalOcean’s developer cloud ... more

Bringing full-stack to the JAMstack

Want great developer experience and easy scaling? Redwood is here! Built on React, GraphQL, and Prisma, Redwood works with the components and development workflow you love, but with simple conventions and helpers to make your experience even better. ... more

Possibly the smallest compiler ever

This is an ultra-simplified example of all the major pieces of a modern compiler written in easy to read JavaScript. Reading through the guided code will help you learn about how most compilers work from end to end. Clocks in under 1,000 lines of code. ... more

JS Party 117: Catching up with Gatsby

Dustin Schau joins the party to talk about the state of Gatsby and the changes and improvements to it in the last year. We talk about what Gatsby delivers to the front end and how it does it quickly with improvements to the build system. Dustin also ... more

To get good, go after the metagame

I absolutely loved this piece by Cedric Chin about games and their metagames . Fascinating stuff to think about. Every sufficiently interesting game has a metagame above it. This is the game about the game. It is often called ‘the meta’. I’m a fan of ... more