Feed

JavaScript

Follow JavaScript language developments, standard library updates, and framework trends. Our digest aggregates ES proposals, V8 engine discussions, and modern JavaScript from developer communities.

Articles from the last 30 days

Ladybird Browser adopts Rust
01Monday, February 23, 2026

Ladybird Browser adopts Rust

The Ladybird browser project has begun transitioning parts of its codebase from C++ to Rust, starting with the LibJS JavaScript engine. This decision prioritizes memory safety and leverages the mature Rust ecosystem. Using AI-assisted translation, developers achieved identical byte-for-byte performance and output without regressions, aiming for a phased, stable integration which will eventually replace the C++ pipeline.

Ars Technica makes up quotes from Matplotlib maintainer; pulls story
02Friday, February 13, 2026

Ars Technica makes up quotes from Matplotlib maintainer; pulls story

Mastodon is a decentralized social networking platform. Its web interface requires JavaScript to function properly. Users who prefer not to use a web browser can access the service through various native apps available across multiple operating systems, ensuring broad compatibility and accessibility for the federated network.

Sources:Hacker News517 pts
LinkedIn checks for 2953 browser extensions
03Thursday, February 5, 2026

LinkedIn checks for 2953 browser extensions

A collaborative open-source investigation has revealed that LinkedIn's fingerprinting script silently probes for 2,953 unique Chrome extensions upon every page load. This repository provides a comprehensive breakdown of these identifiers, including a dataset that maps 32-character extension IDs to their specific names and Chrome Web Store links. The findings indicate that while 78% of these extensions remain active on the store, roughly 22% have been removed or are unavailable, necessitating the use of the Extpose fallback for identification. The project includes Node.js automation tools to fetch extension names and verify which tools LinkedIn is monitoring. This practice raises significant concerns regarding user privacy, web security, and the ethics of invasive browser fingerprinting techniques used by major social media platforms to profile user environments without explicit consent or disclosure.

Sources:Hacker News450 pts
Goodbye InnerHTML, Hello SetHTML: Stronger XSS Protection in Firefox 148
04Tuesday, February 24, 2026

Goodbye InnerHTML, Hello SetHTML: Stronger XSS Protection in Firefox 148

Firefox 148 introduces the standardized Sanitizer API, a major security advancement designed to mitigate Cross-site scripting (XSS) vulnerabilities. By replacing innerHTML with the setHTML() method, developers can automatically clean untrusted HTML before DOM insertion. The API works alongside Trusted Types to provide a safer default for the web without requiring complex architectural changes.

We deserve a better streams API for JavaScript
05Friday, February 27, 2026

We deserve a better streams API for JavaScript

James Snell criticizes the WHATWG Streams Standard for usability and performance flaws, proposing an alternative built on JavaScript async iterables. This pull-based approach simplifies backpressure, reduces promise overhead, and eliminates complex locking. Benchmarks show 2x to 120x speed improvements by leveraging batching and synchronous fast paths, advocating for a modern, idiomatic streaming primitive.

Sources:Hacker News385 pts
"Nothing" is the secret to structuring your work
06Sunday, February 8, 2026

"Nothing" is the secret to structuring your work

The website vangemert requires JavaScript to function correctly. Without it, users may experience issues as the site relies on it for core features and interactivity. Users are advised to enable JavaScript in their browser settings to access the service and ensure a proper browsing experience.

Sources:Hacker News367 pts
archive.today is directing a DDOS attack against my blog
07Sunday, February 1, 2026

archive.today is directing a DDOS attack against my blog

In early 2026, the popular web archiving service archive.today reportedly integrated a JavaScript snippet into its CAPTCHA pages to perform a distributed denial of service (DDoS) attack against Gyrovague, a personal blog. The script executes a rapid succession of non-cacheable search requests every 300 milliseconds while a user remains on the CAPTCHA screen. This hostility apparently stems from a 2023 OSINT investigation published by the blogger regarding the site's mysterious origins, which recently gained renewed attention following FBI subpoenas and legal threats involving the domain. Despite attempts at mediation and escalating threats from an individual using the alias 'Nora Puchreiner', the blogger refused to remove the content. The incident highlights the bizarre and sometimes malicious behavior of anonymous web entities when faced with transparency efforts, and illustrates how easily user browsers can be weaponized in online disputes.

Dictionary Compression is finally here, and it's ridiculously good
08Monday, February 23, 2026

Dictionary Compression is finally here, and it's ridiculously good

Dictionary compression, utilizing Zstandard and Brotli, is revolutionizing web traffic by allowing browsers to use previous responses or custom files as reference dictionaries. This technique can reduce JavaScript and HTML transfer sizes by up to 90%. Now widely supported in modern browsers and backend environments, it offers a standardized way to deliver highly efficient delta updates.

Sources:/r/programming337 pts
When Code is Free, Why is Claude is an Electron app?
09Saturday, February 21, 2026

When Code is Free, Why is Claude is an Electron app?

Anthropic leverages Electron for its Claude desktop app despite the high costs of supporting native development. While AI coding agents can quickly build cross-platform prototypes, they struggle with the final 10% of development, maintenance, and edge cases. Consequently, Electron remains the industry standard for shipping cross-platform software efficiently until agents can handle long-term support autonomously.

Sources:Hacker News320 pts
Luce: First Electric Ferrari
12Monday, February 9, 2026

Luce: First Electric Ferrari

The content indicates a technical restriction where a user is unable to access a specific web service because JavaScript is disabled in their web browser. It emphasizes that JavaScript is a mandatory requirement for the verification process designed to distinguish human users from automated bots. The message instructs the user to enable JavaScript within their browser settings and refresh the page to proceed. This highlights the critical role of client-side scripting in modern web security, user authentication, and interactive web functionalities used to protect digital resources from unauthorized access or bot activity.

Sources:Hacker News242 pts
The JavaScript Oxidation Compiler
13Monday, February 23, 2026

The JavaScript Oxidation Compiler

OXC is a collection of high-performance JavaScript and TypeScript tools written in Rust. It features an ultra-fast parser that outperforms SWC and Biome in benchmarks. The suite includes a linter for enforcing code styles, a Node.js-compatible resolver, and a transpiler designed for speed, helping developers catch bugs and optimize code efficiently.

Sources:Hacker News218 pts
Stop Installing Libraries: 10 Browser APIs That Already Solve Your Problems
14Wednesday, February 4, 2026

Stop Installing Libraries: 10 Browser APIs That Already Solve Your Problems

This article explores ten powerful yet frequently underutilized Web APIs that enhance the capabilities of modern browsers. It highlights essential tools such as the Structured Clone API for deep object copying, the Performance API for accurate micro-benchmarking, and the Page Visibility API for optimizing resource usage when tabs are inactive. Additionally, it covers specialized observers like ResizeObserver and IntersectionObserver, alongside advanced coordination tools like AbortController, BroadcastChannel, and Web Locks. The author emphasizes that the web platform is evolving rapidly, often providing native solutions that replace the need for heavy external libraries. While some features like the File System Access API are currently Chromium-focused, understanding these native capabilities provides developers with a significant technical edge in building high-performance, responsive web applications.

Sources:Dev.to209 pts
We have ipinfo at home or how to geolocate IPs in your CLI using latency
15Saturday, January 31, 2026

We have ipinfo at home or how to geolocate IPs in your CLI using latency

This content explores the development of a CLI tool designed to geolocate IP addresses using network latency rather than traditional, often inaccurate geofeed data. The author highlights how some VPN providers manipulate location data to appear as though they have infrastructure in various countries. By leveraging Globalping, an open-source network of over 3000 probes, the tool utilizes a multi-phase approach—detecting continent, then country, and finally state or city—based on the lowest measured latency from traceroute results. While not 100% perfect due to probe distribution, the method successfully identifies the physical location of IPs even when public records are falsified. The project demonstrates the power of community-driven network measurement tools for verifying network topology and improving routing transparency.

Sources:Hacker News203 pts
16 Modern JavaScript Features That Might Blow Your Mind
16Wednesday, February 25, 2026

16 Modern JavaScript Features That Might Blow Your Mind

This guide explores modern ECMAScript features from ES2022 to ES2025, highlighting practical improvements like top-level await, private class fields, and immutability upgrades. It covers new array methods, Object.groupBy, and Promise.withResolvers, showcasing JavaScript's evolution toward cleaner syntax, safer asynchronous handling, and functional data processing patterns for more predictable and readable codebases.

Sources:Dev.to196 pts
Real-time PathTracing with global illumination in WebGL
17Thursday, February 12, 2026

Real-time PathTracing with global illumination in WebGL

A comprehensive real-time PathTracing renderer built on Three.js for desktop and mobile. It features global illumination, physical sky models, and progressive rendering. Innovations include 'Shapes BVH' for optimized mobile performance, support for quadric geometry beyond triangles, custom denoisers, and historical recreations of classic ray-traced scenes by pioneers like Arthur Appel and Turner Whitted.

Sources:Hacker News185 pts
Should Junior Developers Still Learn JavaScript the Hard Way?
18Sunday, February 1, 2026

Should Junior Developers Still Learn JavaScript the Hard Way?

In the evolving landscape of 2026, the debate over learning JavaScript 'the hard way' remains critical for junior developers. While AI copilots and high-level frameworks allow for rapid application deployment, they often mask a lack of fundamental understanding. Learning 'the hard way' involves mastering core concepts like closures, scope, the event loop, and asynchronous behavior using Vanilla JavaScript before adopting abstractions. This foundational knowledge provides developers with the control needed to debug complex issues, optimize performance, and adapt to the inevitable shifts in the technology stack. Rather than gatekeeping, focusing on fundamentals ensures that developers do not rely on 'superstitious debugging' or AI-generated code they cannot verify. The recommendation is a balanced approach: build small projects without frameworks to earn the abstractions, ensuring long-term career resilience when production environments fail or frameworks evolve.

Sources:Dev.to156 pts
Bun v1.3.9
19Sunday, February 8, 2026

Bun v1.3.9

Bun 1.2 introduces several significant features and performance optimizations. Key additions include the --parallel and --sequential flags for running package.json scripts with Foreman-style prefixed output, allowing better control over concurrent task execution. The update also brings HTTP/2 connection upgrades via net.Server, Symbol.dispose support for mock() and spyOn() in bun:test, and ESM bytecode support for --compile. Performance improvements are notable across the board, with SIMD-accelerated regular expressions and Markdown-to-HTML rendering. The JavaScriptCore engine has been upgraded, resulting in substantial speedups for String.prototype.startsWith, Set.size, and Map.size. Additionally, critical bug fixes address ARMv8.0 crashes, NO_PROXY environment variable handling, and Windows path normalization issues in node:fs.

Sources:Hacker News152 pts