A Major Supply Chain Attack Hits the npm Ecosystem

In July, Socket warned us about a phishing campaign targeting npm package publishers. Sadly, a prolific package author (among others, like DuckDB, who explain how the attack worked on them) fell victim to the scam, resulting in some popular packages becoming compromised - https://socket.dev/blog/npm-author-qix-compromised-in-major-supply-chain-attack

#nodejs

How To Use The Safari Developer Tools

Matt Zeunert provides a detailed guide to how to get started with the Safari Web Inspector and introduces some of its more advanced features. - https://www.debugbear.com/blog/safari-developer-tools

#devtools

All you need to know about Angular events: Top conferences and meetups

Are you an Angular enthusiast? Did you know that there’s a big Angular community that holds various events that bring fellow Angular enthusiasts together? Angular has a rising popularity amongst the most used frontend frameworks in IT. Angular brings new features twice a year in order to adapt to the improving technologies and to provide a better developer experience. With these rapid improvements, community events are a great way to catch up and learn together with other developers, regardless of level, and meet new people. With a growing community, right now, you can find various Angular events around the world. The events are in the form of conferences and meetups.  - https://angular.love/all-you-need-to-know-about-angular-events-top-conferences-and-meetups

#angular

Better CSS layouts: Time.com Hero Section

Ahmad Shadeed explores how to rebuild and improve a popular layout sharing a number of handy tips along the way. - https://ishadeed.com/article/time-layout

#css

Roadmap to v4

The Nuxt team shares some exciting news about the roadmap to Nuxt 4, including a new timeline and what to expect in the next few weeks. - https://nuxt.com/blog/roadmap-v4

#vue

How PlayStation Optimized Performance and Revenue for Their Digital Store with GraphQL Federation

Curious how PlayStation supercharged their digital store? Dive into their GraphQL journey: unified APIs, slick performance, and a wishlist that wows. Peek behind the curtain of PS5’s slick experience! - https://www.apollographql.com/blog/how-playstation-optimized-performance-and-revenue-for-their-digital-store-with-graphql-federation

#graphql

react-json-view-lite: Render JSON as a Tree

A lightweight component for visualizing JSON in a way that retains its basic formatting and JSON-ness but that lets you collapse or expand arrays and objects and see the structure more easily. - https://github.com/AnyRoad/react-json-view-lite

#react

Bringing Node HTTP Servers to Cloudflare Workers

A few weeks ago we linked to an item that noticed Cloudflare Workers' local dev tools had begun to support Express.js apps – now support has come to Workers proper, with support for node:http’s client and server APIs if you enable Node.js compatibility. - https://blog.cloudflare.com/bringing-node-js-http-servers-to-cloudflare-workers/

#nodejs

Style Your Underlines

Jeremy Keith demonstrates different options you have to style link underlines. - https://adactio.com/journal/22084

#css

A Custom Opinionated Event Handler for Nuxt API Endpoints with Guards And Validation Support

Learn to create custom event handlers, advanced validation techniques with zod, and endpoints protection with guards. - https://vueschool.io/articles/vuejs-tutorials/a-custom-opinionated-event-handler-for-nuxt-api-endpoints-with-guards-and-validation-support

#vue

Why is inject() better than constructor?

The inject() function was introduced with Angular 14, as an alternative to declaration of dependencies via providers property and via passing them into the constructor. Nowadays it is widely preferred to use inject() instead of constructor. In this article we will discover the benefits that support the argument that using inject() is better and why you should use it. - https://angular.love/why-is-inject-better-than-constructor

#angular

UDP in Node.js: A Technical Guide - https://nodevibe.substack.com/p/udp-in-nodejs-deep-technical-guide

#nodejs

An Interactive Guide to TanStack DB

TanStack DB is the latest project from the popular TanStack collection and offers an embedded client‑side database that uses differential dataflow to power live, relational queries, sub‑ms incremental updates, and optimistic writes. But what does that mean in real life? Maxi spent a week playing with it to see what makes it tick and where it enhances the TanStack Query experience. - https://frontendatscale.com/blog/tanstack-db/

#react

How to Use Nuxt 3 Middleware for Authentication and Permissions

In this article, you'll explore how to implement authentication and permissions using Nuxt 3 middleware effectively. - https://dev.to/jacobandrewsky/how-to-use-nuxt-3-middleware-for-authentication-and-permissions-5d9b

#vue

Get the Number of auto-fit/auto-fill Columns in CSS

Ana Tudor shows how to get the number of auto-fit/auto-fill columns in CSS using container query units, CSS variables, and CSS mathematical functions. - https://frontendmasters.com/blog/count-auto-fill-columns

#css

Angular 20.2 – the recent changes

Angular just got an update, and it comes with a bunch of new features worth checking out. Let’s break them down together. - https://angular.love/angular-20-2-the-recent-changes

#angular

GitHub Copilot CLI Now in Public Preview

Not content to let Claude Code and OpenAI Codex dominate the CLI-based dev agent scene, GitHub has released a CLI-based version of Copilot, built using Node. - https://github.blog/changelog/2025-09-25-github-copilot-cli-is-now-in-public-preview/

#copilot

The Talks from React Universe Conf 2025

React Universe Conf 2025 took place last week in Poland and there were some great talks including Meta’s Jorge Cohen talking about React Native releases in 2025, Christoph Nakazawa on building scalable applications, and Aurora Scharff digging into modern React development patterns. - https://www.youtube.com/playlist?list=PLZ3MwD-soTTGHD999pxTX1r_6JORpOr0C

#react

pnpm 10.16 Adds Support for Delayed Dependency Updates

The alternative efficient npm package manager has added a way to specify a ‘minimum release age’ for package dependencies, so a setting of ‘1440’ (minutes) will mean only packages released more than one day ago will be installed. This can help avoid malicious versions of packages which are quickly withdrawn. - https://pnpm.io/blog/releases/10.16

#nodejs

What We Learned From Creating PostCSS

Andrey Sitnik shares lessons learned from creating and maintaining the PostCSS open source project over the past 12 years. - https://evilmartians.com/chronicles/what-we-learned-from-creating-postcss

#css

Angular CLI MCP Server: Keep Your AI Up-to-Date

Angular released an official MCP Server. This integration bridges the gap between AI assistants and the Angular CLI, providing real-time access to official documentation, current best practices, and workspace analysis – ensuring your AI coding partner stays current with Angular’s rapid evolution. - https://angular.love/angular-cli-mcp-server-keep-your-ai-up-to-date

#angular