Will npm v12 reject your .npmrc?

Plus TypeScript 7 makes VS Code's build time 4x faster, a one-month package publishing delay, and more npm security improvements.

#​792 — June 30, 2026 Read on the Web Together with  JavaScript Weekly Deno 2.9 Released — A huge release for the runtime: deno desktop turns scripts and framework-based projects into native, self-contained desktop apps, quick migration from npm/pnpm/Yarn/Bun lockfiles, big test runner improvements, ~2x faster cold starts, and a target of Node.js 26 compatibility. Bartek Iwańczuk 44 Recorded PostgreSQL Talks Are Now Available to Watch — Explore 44 talks about PostgreSQL-backed app development, Postgres performance & AI, Postgres 19, Azure HorizonDB and more. All sessions are available on YouTube. Learn directly from Postgres experts at your own pace. Check out the playlist. Microsoft | AMD sponsor Iterating Faster on VS Code with TypeScript 7 — How the VS Code team incrementally adopted the Go-based TypeScript 7 compiler (currently in RC) while it was still being built. Type-checking the source went from 36s to 5s, with npm run watch going from 80s to ~20s. The VS Code Team (Microsoft) IN BRIEF: The second preview release of npm 12 is available for testing. This is worth doing, as Colin McDonnell has already noticed npm 12 hard-errors on unrecognized keys in .npmrc files. 🔒 npm now locks 'high impact accounts' (maintainers of the most popular packages) into a 72-hour read-only mode when they change their email or use a 2FA recovery code. The Svelte team has just posted the latest monthly Svelte update. In related news, Svelte creator Rich Harris was recently asked ▶️ for his takes on working with AI and Svelte. RELEASES: 🤖 AI SDK v7 – Vercel's SDK that provides an abstraction for building against any AI model provider. Node.js v26.4 (Current) adds experimental package map support to resolve packages from a static JSON file instead of walking node_modules. Formisch v1 RC – Schema-first, headless type-safe form state library. Prettier 3.9, Rspack 2.1, Electron 43, ESLint 10.6, pnpm 11.9 📖  Articles and Videos Why Drizzle Couldn't Publish New Releases on npm for a Month — As well as explaining why the creators of the popular ORM ran into the problem, Evert shares some tips to see if you're at risk of the same problem, and how to avoid it entirely. Evert Pot The Shifting Line Between CSS States and JavaScript Events — A tour of the (more than you’d think) CSS pseudo-classes that can stand in for JS event listeners, plus a look at the experimental/future event-trigger syntax. Daniel Schwarz Real-Time Analytics on Your Operational Postgres Table — Polling just hides the lag. TimescaleDB's continuous aggregates keep data fresh on read. Get $1000 credit to start. Tiger Data (Creators of TimescaleDB) sponsor Blocking Install Scripts is Not a Silver Bullet — npm v12 won't run install scripts by default, but Ulises argues that only solves part of the supply chain security problem. Ulises Gascon Moving Linear from styled‑components to StyleX — A migration away from a runtime CSS-in-JS approach yielded ~30% faster renders when navigating between pages. Kenneth Skovhus (Linear) 📺 How Tanner Linsley Built TanStack to Outlive Him – A very smoothly produced 15 minute interview with the creator of TanStack. The Build Log 📄 Benchmarking 5 WebSocket Servers for Node.js Irina Nazarova 📄 Handling Mutations with TanStack Query for Vue Marina Mosti 📄 Parsing Arbitrary Dates in Strings with Chrono and a Web Component Raymond Camden 🛠 Code & Tools Nub: An All-in-One Toolkit That Augments Node.js — While Bun or Deno can replace Node, this project from Zod’s creator extends Node with nice-to-haves, like fuller TypeScript support, faster & more secure package installation, better .env handling, and a web-standard Worker. Colin McDonnell et al. Gea: A Compiler-First Reactive UI Framework — A UI framework that goes all in on "compile the framework away": no VDOM, JSX transformed into string templates, proxy-based stores, and 'surgical' DOM patching. The big win is tiny build sizes. Armagan Amcalar Stop Alt-Tabbing to the Dashboard When CI Breaks — Depot CI's new API and CLI let you query runs, pull logs, and diagnose failures without leaving your terminal. Depot sponsor <qr-code> 2.0: Web Component for Generating QR Codes — An easy way to display QR codes in the browser using pure JavaScript. A 13 year old solution that’s been modernized and is now ESM only. Live demo. Eduard Castellano spartan/ui 1.0: shadcn/ui-Style UI Primitives for Angular — If you’re an Angular developer who’s ever envied the copy and paste simplicity of shadcn/ui, this is for you. Robin Goetz Wakaru 1.6 – JavaScript decompiler and bundle splitter. Now with even better 'source-like' output, particularly from bundled React apps. 🎬 TurboRes 1.0 – Fast Zig/WASM-powered Apple ProRes video decoder for JS environments. From the creator of Mediabunny. 📊 ngx-charts 24.0 – Declarative charting framework for Angular. Interactive demo. GopherJS 1.21.0 – A Go to JavaScript transpiler. Now supporting up to Go 1.21.13. whatwg-url 17.0 – JS implementation of the WHATWG URL Standard. Demo. 📰 Classifieds Flaky tests slowing down dev? Meticulous gives engineers confidence to ship faster by autonomously testing every edge case of your web app. Build TypeScript-first AI agents in your codebase. No timeouts, durable queues, & full tracing. Ship your first agent in minutes with Trigger.dev. 📢  Elsewhere in the ecosystem 📊 Frank Denis wanted to see the performance of WebAssembly runtimes in 2026 and pitted nine options against one another, including Bun and Node/V8's options. GitHub is continuing with efforts to make project management less overwhelming in the agentic era. Now you can restrict issue creation to collaborators with write access. Meta has ported Flow, the static type checker for its typed dialect of JavaScript, from OCaml to Rust. The pnpm project is working on pnpr, an experimental pnpm-compatible npm registry server, written in Rust. Git 2.55 has been released with git history fixup for 'fixing up' earlier commits, faster git status on Linux, and more. 🐘 Postgres 19 is currently in beta, with the final release expected this September. Craig Kerstiens looks ahead to what's interesting in Postgres 19 for users and developers.

Published by Cooperpress and edited by Peter Cooper 'JavaScript' is a trademark of Oracle Corporation in the US We are not endorsed by or affiliated with Oracle. Change your email address or stop getting this newsletter. © Cooper Press Ltd · Fairfield Enterprise Centre, Louth, LN11 0LS, United Kingdom