The official e18e ESLint plugin for code modernization and performance best practices - e18e/eslint-plugin

OWASP MCP Taxonomy. Contribute to OWASP/MCP-Taxonomy development by creating an account on GitHub.

Revisit skill descriptions, AGENTS.md, and task prompts to avoid bloated context.

Use stacked pull requests to break large code changes into a chain of smaller, dependent pull requests you can review and merge independently.

The sandbox agent framework. Contribute to withastro/flue development by creating an account on GitHub.

A from-the-ground-up walkthrough of how modern LLMs work, from tokens to transformer blocks to the next-token loop

My 3-step framework for clearer writing, tested on my teams over the years.

VoidZero, the team behind Vite, Vitest, Rolldown, Oxc, and Vite+, is joining Cloudflare. Vite stays open source, vendor-agnostic, and built for everyone.

Learn about how we built a CI-native AI code reviewer using OpenCode that helps our engineers ship better, safer code.

We've all added some AI to our applications. A summarize button here, a transcribe button there — pockets of functionality, glued onto the existing UI. But the next step is different. What if our…

AI can write code, explain errors, generate tests, and confidently suggest the wrong abstraction in seconds. Amazing. Exhausting. ​This talk is a fun, honest look at development in the AI era:…

On 2026-05-11, an attacker chained a pull_request_target Pwn Request, GitHub Actions cache poisoning across the fork↔base trust boundary, and OIDC token extraction from runner memory to publish 84 mal...

Socket detected 84 compromised TanStack npm packages modified with suspected CI credential-stealing malware.

No web standard should require you to agree to an advertising company’s “terms of use.”

As AI floods codebases with machine-generated output, the AI verification trap emerges to test the resolve of modern developers.

In this article, we will look at how COSMO works and the challenges the engineering team faced.

Being the individual people run to in a fire may feel great short-term, but the negative effects can pile up.

Hello JavaScripters, ready for a new tim.js edition? See you on Apr 29th for two awesome presentations. Here is the agenda: *** 🎤 Migrating to Native…

Today we are absolutely thrilled to announce the release of TypeScript 7.0 Beta! If you haven’t been following TypeScript 7.0’s development, this release is significant in that it is built on a comple...

The path to better performance is often found in simplicity.

Speed is seductive, but unchecked velocity creates hidden risk. When building gets cheaper, scrutiny disappears—leading to security gaps, product bloat, and cultures that reward shipping over thinking...

Use Codex from Claude Code to review code or delegate tasks. - openai/codex-plugin-cc

A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHu...

Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.