Articles
TypeScript, JavaScript, tooling, security, and web platform coverage in one archive.
Explore every story published on typescript.news, from TypeScript releases and framework shifts to supply chain security incidents.
javascript
Oxc Is Quietly Building the Fastest JavaScript Toolchain in Rust — And It's Almost Ready
While ESLint v10 was wrestling with legacy cleanup, the Oxc project shipped a linter 100x faster, a formatter 30x faster than Prettier, and a parser that leaves SWC in the dust. Here's what the JavaScript oxidation compiler actually is.
Node.js
Node.js March 2026: Six Security Patches Land Across All Active Branches
Node.js shipped emergency security releases for v25, v24, v22, and v20 on March 24, 2026, patching two high-severity CVEs including a TLS SNICallback crash and an HTTP header prototype pollution risk. Here's what each fix does and which versions are affected.
GitHub
GitHub Copilot's Quiet Policy Shift: Your Code Will Train Their Models Unless You Opt Out
Starting April 24, 2026, GitHub will use interaction data from Free, Pro, and Pro+ Copilot users to train AI models — unless they manually opt out. Business and Enterprise tiers are unaffected. Here's what changes and how to protect your code.
JetBrains
JetBrains Opens the Vault: JavaScript and TypeScript Support Now Free in IntelliJ IDEA
As of March 2026, IntelliJ IDEA v2026.1 ships JavaScript, TypeScript, HTML, CSS, and basic React features at no extra cost — features that previously required a paid Ultimate subscription. The catch: Angular, Vue, and advanced debugging still need Ultimate.
AI agents
Rivet Agent OS: The In-Process OS That Runs AI Agents 500x Cheaper Than Sandboxes
YC and a16z-backed Rivet built an agent runtime on V8 isolates and WebAssembly that cold-starts in 4.8ms — 92x faster than E2B, at 1/17th the cost. We deeply researched the architecture, the benchmarks, and what it means for every agent framework.
security
Axios npm Supply Chain Attack: Malicious Versions Drop Remote Access Trojan
Two poisoned releases of axios — one of the most widely-used Node.js HTTP client libraries — were published and pulled from npm within hours. Here's what happened, how the attack worked, and what you need to do right now.
security
Claude Code Source Map Leak Exposes Hidden Agent OS, Chrome Automation, and Privacy Gaps
On March 30–31 2026, developers discovered that the npm package @anthropic-ai/claude-code@v2.1.88 included a production source map file that exposed the full TypeScript source code — revealing undocumented multi-agent orchestration, a hidden Chrome MCP server, an internal query engine, a tool permission system, and a three-tier telemetry system.
javascript
Pretext: The DOM-Free Text Measurement Library That AI Coding Agents Are Already Using
Cheng Lou just released Pretext, a pure JavaScript library that measures and lays out multiline text without touching the DOM. Here's why that matters for virtualization, layout control, and AI agents that write UI code.


astro
Astro 6 Takes Center Stage: Rust Compiler, Live Content, and a Cloudflare Future
Astro 6.0 and 6.1 land within weeks of each other, bringing an experimental Rust compiler, request-time content collections, a built-in Fonts API, CSP tooling, and deeper Cloudflare integration — all while the framework doubles its adoption for the third year running.

typescript
State of JavaScript 2025: TypeScript Hits 40% Exclusive Usage as Ecosystem Settles
The State of JavaScript 2025 survey shows TypeScript exclusive usage at 40%, Vite satisfaction at 98% versus Webpack's 26%, and Claude doubling its developer share. The ecosystem is maturing rather than churning.

webstorm
WebStorm 2026.1 Brings Native TypeScript Engine and Multi-Agent AI to JetBrains' Flagship IDE
JetBrains releases WebStorm 2026.1 with a service-powered TypeScript engine enabled by default, integration with Junie, Claude Agent, and Codex, and improved framework support across React, Angular, Vue, and Svelte.
typescript
TypeScript 6.0 Ships: The Last JavaScript-Based Release Before the Go Rewrite
Microsoft ships TypeScript 6.0 as the final release built on the original JavaScript codebase. DOM type updates, improved inference, subpath imports, and a migration flag set the stage for the native Go-based TypeScript 7.0.


javascript
Bun vs Node vs Deno in 2026: The Runtime Showdown Nobody Asked For (But Everyone's Having)
Three JavaScript runtimes. Three different philosophies. Independent benchmarks across HTTP throughput, cold starts, and async performance tell a clearer story than marketing ever could. Here's the brutally honest breakdown for developers choosing their next server-side JS platform.

ai
Claude Code Went from Zero to #1 in Eight Months: The 2026 AI Coding Tool Showdown
By early 2026, Claude Code held a 46% 'most loved' rating among developers, leaving Cursor at 19% and GitHub Copilot at 9%. But love ratings and usage rankings don't tell the whole story. Here's what each tool actually does well, and when to use which.
typescript
TypeScript 7 Native Preview: Project Corsa Rewrites the Compiler in Go — and It Changes Everything
Microsoft's decision to port the TypeScript compiler and language service to Go isn't just a tech demo — early benchmarks show the VS Code codebase compiling in 7.5 seconds versus 77.8 seconds. Here's what the native era means for your build pipeline and editor performance.


vite
Vite+: One CLI to Rule Them All — Or Just Another Layer of Hype?
VoidZero's Vite+ promises to unify runtime, package manager, bundler, linter, formatter, and test runner under a single command. We read the announcements, benchmarked the claims, and talked to people using it in production. Here is what we found.
