A Bun-believable release that isn't half-baked

дата:
Plus moving beyond signals, bringing Python into JavaScript, and making JavaScript more trustworthy. |

#​757 — October 17, 2025

Read on the Web
Together with  Auth0

JavaScript Weekly

Bun 1.3: The Full-Stack JavaScript Runtime — Arriving a few hours after last week's issue (natch!) Bun 1.3 remains the big news of the past week. Bun is a performance and DX-focused JavaScriptCore-powered runtime which, with v1.3, balances being a drop-in Node.js replacement with becoming a 'full-stack runtime' among other exciting developments:

It also wouldn't be a big Bun release without ▶️ the obligatory release video.

The Bun Team

AI Agents? Meet External Tools — Launching an AI-powered app? Make sure your agent is securely connecting with all of your external tools and APIs. Learn more about how Auth0's Token Vault can secure your logins and agents so your users aren't left vulnerable and exposed.

Auth0 sponsor

Announcing Vite+ / VitePlus — Originally announced at last week's ViteConf, Evan shares more details about what this extended, unified Vite-based toolchain (now in 'early access') is, and the motivation behind it. Unlike regular Vite, it has a commercial angle but "will be free for individuals, open source projects, and small businesses" as well as "source available."

Evan You

Node.js v25.0.0 (Current) Released — The latest cutting edge version of Node has arrived with Web Storage enabled by default, JSON.stringify perf improvements, a new --allow-net option in the permission model, built-in Uint8Array base64/hex conversion, and WebAssembly and JIT optimizations.

Rafael Gonzaga

IN BRIEF:

RELEASES:

📖  Articles and Videos

Improving the Trustworthiness of JavaScript on the Web — A look at WAICT (Web Application Integrity, Consistency, and Transparency), an early-stage W3C-backed effort to bring stronger 'app store-like' security guarantees to the Web by ensuring the code a browser runs hasn't been modified by attackers.

Michael Rosenberg (Cloudflare)

▶  Beyond Signals — A half-hour talk from the creator of SolidJS, exploring how signals (once pioneering, now mainstream) are shaping web development, their architectural implications, but why we're only "at the beginning of the journey" and what comes next.

Ryan Carniato

Build Smarter Web Apps with AI-Powered JavaScript UI Controls — Build enterprise apps faster with 145+ AI-ready, high-performance JS components. Start your free trial today.

Syncfusion sponsor

Lazy Fields for 30x Speedup Without Decorators or Transforms — Some clever work from the creators of the Joist ORM.

Stephen Haberman (Joist)

🌿 A Quick Tutorial on the Barnsley Fern Fractal — The Barnsley fern is a fractal that represents a plant-like fern structure.

Slicker

💡 Slicker has other examples of implementing effects in (somewhat old school) JavaScript, including the Julia set fractal, plasma, and a fire effect.

📄 Find Where a Specific Object Was Allocated in JavaScript with DevTools – A slightly convoluted Chrome DevTools trick for tracking down where a specific object was allocated. Joona Heikkilä

📄 A Modern Guide to Reading and Writing Files in Node.js – A comprehensive guide to a variety of approaches. Luciano Mammino

📄 Refactoring a Form to a Signal Form in Angular Tim Deschryver

📄 How to Get Started with GitHub Copilot CLI Andrea Griffiths (GitHub)

🛠 Code & Tools

DOMPurify 3.3: A Fast, Tolerant XSS Sanitizer for HTML — Supports all modern browsers (as well as Node.js) and is heavily tested. There's a live demo here.

Cure53

python-node: Integrate Python ASGI Apps with Node.js — Several months ago Platformatic unveiled php-node, a way to embed PHP directly within Node apps. Now they're tackling Python with @platformatic/python-node, a Node-native bridge that embeds a Python interpreter and speaks ASGI.

Stephen Belanger and Matteo Collina

Tiger Lake: Real-Time Data for Dashboards, Agents & Analytics — Unify Postgres and your lakehouse for live, full-context data—no pipelines, no lag.

TigerData sponsor

jsonriver: A Simple, Fast Streaming JSON Parser — A library to parse JSON incrementally as it streams in, such as from a network request or an LLM, returning a sequence of 'increasingly complete' values.

Peter Burns (Google)

Kaluma 1.3: A Tiny JS Runtime for the Raspberry Pi Pico 2 — Can a JavaScript runtime squeeze onto an RP2350-based Raspberry Pi Pico 2? Kaluma can, all while offering some Node.js-like niceties. v1.3 is powered by the latest version of JerryScript, a lightweight JS engine for constrained environments.

Kaluma Project

Triplex: A Visual Workspace for Building React Components — Originally a commercial tool for laying out components in 3D scenes rendered with React Three Fiber, Triplex is now open source. Its scope has increased with a VS Code extension and support for regular React DOM elements and components too.

Mike Douges and Pmndrs

  • 🗓️ Schedule-X 3.3 – Event calendar control. MIT licensed, but with a premium version with added features.

  • json-joy v17.55.0 – Real-time, collaborative editing algorithms and utilities for JSON data models.

  • Ky 1.12 – Simple HTTP client based upon Fetch for browsers, Node & Deno.

  • 🗓️ React Date Picker 8.8 – Simple date picker component. (Demo.)

  • Faker 10.1 – Generate fabricated data to your heart's content.

📰 Classifieds

Meticulous writes and maintains your E2E UI tests. Built on Chromium with a deterministic engine, it's the only testing tool that eliminates flakes.

🚀 Unlock 2× Team Efficiency in Just 30 Days. JS Weekly readers: Claim your free Audit by Fractional CTO and resolve your toughest SaaS issues—fast.

🕳️ 🥊 Hiring Now: Build P2P apps for mobile & desktop. Ditch servers, empower users, protect privacy. Open source. Remote EU.

📢  Elsewhere in the ecosystem

A roundup of some other interesting stories in the broader landscape:

n

Комментарии

Отправить комментарий