Let's pave the way for the upcoming v5. fast-check 4.10.0 comes with the idea of easing the migration path to v5. As such, it should be seen as an intermediate version easing the move to v5. It introd...

The library for web and native user interfaces

Vitest 5.0 Release Announcement

Hey 👋, I'm Nicolas, core maintainer and main contributor to the project called fast-check. The project does property based testing and reaches 8 million (650k when I opened the ticket) downloads a ...

Public repositories running AgentScan on their CI

Why I'm stopping using AI for coding (and anything else) after using it earnestly for a year and coming to understand the harms it causes on personal, societal, and environmental levels.

Want to follow along with Rust development? Curious how you might get involved? Take a look!

pnpm 11.10 hardens registry auth to block token redirection, tightens pack-app and deploy, and makes the Rust port (v12) installable.

Logistics Date & Time: Wednesday 17th June at 12:00 CEST (local time) URL: https://meet.jit.si/WEH2026-js-testing Notes: https://hackmd.io/@rego/WEH2026-js-testing/edit Room: JS Room (rooms 4 + 5) ...

dependents.dev - Analyze package dependents, downloads, and traffic across the ecosystem.

Documentation for the npm registry, website, and command-line interface

TeamPCP and BreachForums are promoting a Shai-Hulud supply chain attack contest with a $1,000 prize for the biggest package compromise.

Verify whether a published npm package can be faithfully rebuilt from its declared source. Reproducibility over provenance.

Socket detected 84 compromised TanStack npm packages modified with suspected CI credential-stealing malware.

My own personal thoughts and opinions on AI effects and usage, and how those have evolved over time

pnpm 11 turns on a 1-day Minimum Release Age and blocks exotic subdeps by default, adding safeguards against fast-moving supply chain attacks.