TypeScript.fm - The Friendly Show for TypeScript Developers – Détails, épisodes et analyse

News for the week of December 1, 2025: Anthrophic acquired Bun, React2Shell is pretty darn bad (and that's not all), plus "elf spam" packages on npm. From the community: tRPC vs. oRPC, demystifying TSConfig, and hash-slash (#/) project-relative import support in Node.

MCP in Practice Course
Watch now. Kamran shows you how to build a practical enterprise-grade MCP server with .NET, C#, and OAuth, hosted remotely on Azure. (Requires subscription)

Sponsored by Excalibur.js
Excalibur.js is the free and open source friendly TypeScript 2D game engine for the web. Learn to make web games with TypeScript or JavaScript! Excalibur comes out-of-the-box with everything you need, like physics, sprites, animations, sound effects, and first-party plugins for popular 2D gamedev tools.

• Homepage and Docs: https://excaliburjs.com
• Make Your First Game in 10 Minutes
• Join the Discord: https://discord.gg/9UemP985Uy

Chapters

• (00:00) - Welcome to the Show
• (04:09) - Kamran's MCP in Practice Course is Now Live on Pluralsight
• (08:35) - News: Anthropic Acquires the Bun JavaScript Runtime
• (13:41) - News: Vite 8 Beta with Rolldown
• (15:40) - News: tsdown 0.17 Release
• (17:10) - News: oxlint Brings Type-aware Linting in Alpha
• (17:50) - News: oxfmt Alpha is 30X Faster Than Prettier
• (18:45) - News: Gird Your Loins for Upcoming Node.js Security Releases
• (19:38) - News: React2Shell Remote Code Execution Exploit in RSC
• (26:55) - News: React2Shell Causes Yet Another Cloudflare Outage
• (28:16) - News: Santa's Elves Flood npm With Naughty "Gifts"
• (30:10) - News: SVG Clickjacking Exploit Using Filters
• (32:05) - Community Highlight: tRPC vs. oRPC for Your Next TypeScript Project?
• (33:15) - Community Highlight: Testing Vue Composables in TypeScript by John Franey
• (34:03) - Community Highlight: Formisch for React Quietly Released by Fabian Hillar
• (34:53) - Community Highlight: Building a Dinosaur Runner Game in Deno
• (36:19) - Community Highlight: Node Will Soon Support Project Root Import Paths
• (37:51) - Community Highlight: TSConfig Grimoire by Bjorn Lu
• (39:01) - Community Highlight: How is ESM vs. CJS Going? by Titus
• (40:45) - Community Highlight: Next Astro Release Supports Vite Environments API
• (41:18) - Bleet of the Week by Joke Bailey
• (42:10) - Cool Read: Godot Shaders Bible by Fabrizio Espendola
• (42:56) - Cool Watch: Cancellation Tokens by Stephen Toub
• (43:44) - Cool Game: Classic Game Zork is Released as Open Source
• (44:16) - Cool Tool: Helion, a Modern DOOM Engine
• (45:18) - Cool Watch: Modern .NET Serialization Attacks by Hampton Paulk
• (47:25) - Cool Reads: Architecture for Flow and Domain-driven Transformation
• (48:40) - The Minnesota Long Goodbye

News

• Bun: Bun is joining Anthropic 
• ViteLand: Vite 8 Beta: The Rolldown-powered Vite
• ViteLand: Announcing Oxlint Type-Aware Linting Alpha
• ViteLand: The first Oxfmt alpha was released
• ViteLand: tsdown got a new release
• Node.js PSA: Prepare for Monday, December 15, 2025 Security Releases
• Cloudflare: Cloudflare outage on December 5, 2025
• Security: npm Sees Surge of Auto-Generated “elf-stats” Packages Published Every Two Minutes via (Sarah Gooding)
• Security: SVG Filters - Clickjacking 2.0 Ʊ lyra's epic blog 

React2Shell Resources

• React2Shell Exploit: Critical Security Vulnerability in React Server Components
• Deep Dive: https://react2shell.com/
• Next.js: Security Advisory: CVE-2025-66478
• Deno Blog: React Server Functions / Next.js Vulnerability: Deno Deploy users protected 
• Explainer: this is the worst case scenario by LowLevelEd

From the Community

• Temitope Oyedele: tRPC vs oRPC: Which is better for your next TypeScript project, and why?
• John Franey: How to test a Vue composable with TypeScript · JohnFraney.ca
• Fabian Hiller: Formisch for React just released (quietly) – the form library that powers SolidJS 
• Deno: Build a browser game in Deno 
• Hybrist: Node support for #/ wildcard (via Rob Palmer)
• Bjorn Lu: TSConfig Grimoire (via Rob Palmer)
• Wooorm: How is ESM from Common going?
• Astro: Next release of Astro will support Vite Environment API

Cool Links

• Cool Read: Godot Shaders Bible and Ghastly in Desmos by Fabrizio Espindola
• Cool Watch: Cancellation Tokens with Stephen Toub
• Cool Game: Preserving code that shaped generations: Zork I, II, and III go Open Source 
• Cool Tool: Helion Engine, a modern DOOM engine in C#
• Cool Watch: Modern .NET Serialization Attacks by Hampton Paulk
• Cool Reads: Architecture for Flow and Domain-driven Transformation

Music
Seahorse Dreams by Kubbi (Spotify)

News for the week of November 24, 2025: TypeScript team discusses progress on TS 7 and upcoming deprecations for TS 6. Plus, Svelte's new hydratable API. From the community: creating strongly-typed CLIs with yargs, magic union types to check characters, and how TypedArray can reduce memory usage.

Sponsored by Excalibur.js
Excalibur.js is the friendly TypeScript 2D game engine for the web. Use your TypeScript or JavaScript skills to make games! Excalibur comes out-of-the-box with everything you need to make web games, like physics, sprites, animations, sound effects, input, tile maps, particles, and more.

• Homepage and Docs: https://excaliburjs.com
• Make Your First Game in 10 Minutes
• Join the Discord: https://discord.gg/9UemP985Uy

Chapters

• (00:00) - Welcome to the Show
• (05:21) - News: Progress on TypeScript 7 and Upcoming Deprecations
• (15:24) - News: Advent of Code is Live for Holiday Coding
• (17:07) - News: Svelte 5.44.0 Introduces hydratable API
• (19:18) - News: Vite+ FAQ Answers Some Common Questions
• (20:21) - News: Zed IDE Adds Better TS Error Messages
• (22:01) - News: TypeScript ESLint Will Simplify Redundant Type Unions
• (22:24) - Library Watch: Spikard, a Polyglot API Toolkit
• (23:31) - Library Watch: Type-safe CLIs with Optique
• (24:09) - Community Highlight: The Summer I Shipped Type Stripping by Marco Ippolito
• (25:51) - Community Highlight: Building Strongly Typed CLI Applications by John Reilly
• (27:10) - Community Highlight: Using Zod and TypeScript by Telerik
• (27:45) - Community Highlight: Lowercase & Uppercase Union by TypedRocks
• (28:32) - Community Highlight: Improving Bazel Type Checks with Isolated Declarations by Brad Zacher
• (29:28) - Community Highlight: Data-oriented Modeling by Aapo Alasuutari
• (32:01) - Community Highlight: Doom in TypeScript Types by Software Engineering Daily
• (32:17) - Bleet of the Week
• (32:45) - Cool Watch: Human-sized Lego Castle with 3D Printing
• (33:42) - Cool Watch: Predators (2010)
• (34:24) - Cool Watch: dotnetconf Talks
• (37:20) - The Minnesota Long Goodbye

News

• TypeScript Blog: Progress on TypeScript 7
• Advent of Code is live!
• Svelte 5.44.0 introduces `hydratable` API
• Vite+: New FAQ 
• Zed v0.214.0, now with better TS Errors
• TypeScript-ESLint 8.48.0 adds type union redundancy check
• Library Watch: spikard, a polyglot API toolkit
• Library Watch: Optique 0.7.0 (via Hong Minhee)

From the Community

• Marco Ippolito: Summer I Shipped Type Stripping
• John Reilly: Yargs: statically typed builder commands (via johnnyreilly)
• Telerik: Zod + TypeScript: Schema Validation Made Easy 
• TypedRocks: The Secret Power of The  Lowercase & Uppercase UNION in TypeScript 
• Brad Zacher: Improving Bazel TypeScript TypeChecks With IsolatedDeclarations (via Rob Palmer)
• Aapo Alasuutari: Interlude: A data-oriented model
• Software Engineering Daily: Josh and Dmitri talk about Doom in TypeScript Types

Cool Links

• Cool Watch: NFTI building a 3D printed castle
• Cool Watch: Predators (2010)
• Cool Watch: dotnetconf
• Cool Link: Aspire.dev, code-first local dev environments

Music
Seahorse Dreams by Kubbi (Spotify)

News of the week of September 29, 2025: Is Deno the answer to npm's security issues? From the community: replacing .env files with 1Password, stepping outside of TypeScript's padded room, and temporal dead zones. Plus, Kamran fell into a rabbit hole and defeated the Red Queen: SSR with .NET.

Chapters

• (00:00) - Welcome to the Show
• (07:39) - News: TSGo Got a Lil Bit Faster (Still)
• (08:56) - News: How Deno Protects Against npm Exploits
• (13:28) - News: DBOSS Adds Better JS and TS Support for Durable Workflows
• (15:44) - News: Astro Got a New Sponsor
• (16:49) - Community Highlight: Liran Tal on Mitigating Supply Chain Security for Node.js Local Dev
• (21:11) - Community Highlight: Why is the TypeScript Codebase Littered with var Statements?
• (23:36) - Community Highlight: When Type Safety Can Be Tricky
• (27:40) - Community Highlight: Theo.gg on Life After TypeScript
• (29:10) - Community Highlight: Kamran Got React SSR Working Under .NET!
• (40:12) - Cool Link: En*bleep*ification by Cory Doctorow
• (40:32) - The Minnesota Long Goodbye

News

• TSGO News: PR #1732: Improves source file parse time by ~10%
• How Deno protects against npm exploits
• DBOS 2.0 adds JS support with a decoratorless API. (docs)
• What’s new in Astro - September 2025

From the Community

• Liran Tal: Mitigate Supply Chain Security with DevContainers and 1Password for Node.js Local Development
• Vincent Rolf: The Temporal Dead Zone, or why the TypeScript codebase is littered with var statements
• Paul Schmeing: TypeScript and the Illusion of Type-Safety
• Theo: Life after TypeScript
• Kamran: dotnet-ssr, an (experimental!) .NET SSR host

Cool Stuff

• Erik's LD58 Game Jam: Play the Gem Jam Game
• Video: Kamran on rendering React Router using a .NET SSR host
• Book: Ensh*ttification with Cory Doctorow (plus, Interview with Adam Conover)
• Kamran's Course: Staying on Task with the Pomodoro Technique
• Kamran's Course: Prioritizing Work with Rocks, Pebbles, and Sand
• Library: microsoft/node-api-dotnet, advanced interoperability between .NET and JavaScript in the same process.
• Library: agracio/edge-js, run .NET and Node.js code in-process on Windows, MacOS, and Linux

Sponsored by Excalibur.js
Excalibur.js is the friendly TypeScript game engine for making 2D web games. Use your TypeScript or JavaScript skills to make games! Excalibur comes out-of-the-box with everything you need to make web games, like physics, sprites, animations, sound effects, input, and particles. Design your assets with tools like Aseprite and Tiled, then load them natively using first-party plugins.

Music
Seahorse Dreams by Kubbi (Spotify)

News of the week of September 22, 2025: new default option in TS 6.0, Jiti upgrade, and Cloudflare's on a tear. Plus, npm's security roadmap. From the community: Python-style kwargs, running TS on MS-DOS, and running JS on PlayStation.

Chapters

• (00:00) - Welcome to the Show
• (07:42) - News: Take the State of JS Survey 2025
• (08:25) - News: TS 6.0 Will Enable noUncheckedSideEffectImports by Default
• (09:09) - News: Jiti 2.6 is Faster Thanks to RSPack
• (11:14) - News: ECMAScript Proposal for Non-extensibility Applying to Private Fields
• (13:06) - News: ECMAScript Proposal for Array.prototype.pushAll
• (15:00) - News: ECMAScript Proposal for Iterator Chunking
• (16:04) - News: Introducing Cap'n Web, a New RPC System for the Web
• (20:20) - News: Code Mode, Generating TypeScript Clients for MCP Servers
• (25:57) - News: Cloudflare Workers Have Improved Node Compatibility
• (28:24) - News: GitHub's Plan for a Secure NPM Supply Chain
• (33:22) - News: Astro 5.14 Adds Svelte Async Rendering and React 19 Actions
• (34:05) - Community Highlights: Scrimba's Free TS Course
• (34:28) - Community Highlight: Python-style kwargs in TypeScript
• (37:24) - Community Highlight: Porting TypeScript to Run on DOS
• (39:44) - Community Highlight: Running JavaScript on PlayStation
• (41:28) - Community Highlight: Is effect-ts Really Good, Or is it Just Hype?
• (44:19) - Cool Links: Tiny Helpers
• (45:17) - Cool Read: Itch Game Shout-outs
• (45:58) - Cool Tool: Autogenerate HTTPS Domains for Vite Dev Servers
• (47:23) - Cool Link: Find Out If You Have Unclaimed Money or Property
• (49:31) - The Minnesota Long Goodbye

News

• PSA: State of JavaScript 2025
• TS 6.0 will enable "noUncheckedSideEffectImports" by default 🎉 (h/t Rob Palmer)
• Jiti 2.6 – runtime for TS/ESM in Node.js is now using SWC/RSPack
• tc39/proposal-nonextensible-applies-to-private (h/t Rob Palmer)
  • “This breaking change means that if you seal/freeze an object, it cannot later have private fields stamped upon it ❄️”
• DanielRosenwasser/proposal-array-push-all (h/t Rob Palmer)
  • “It lets you append many items into an existing array without running out of stack memory 👍”
• tc39/proposal-iterator-chunking (h/t Rob Palmer)
  • “It lets you make iterators that can chunk & window content”
• Cloudflare: Cap'n Web: a new RPC system for browsers and web servers
• Cloudflare: Code Mode: the better way to use MCP
• Cloudflare: A year of improving Node.js compatibility in Cloudflare Workers (h/t James Snell)
• GitHub: Our plan for a more secure npm supply chain
• Metaframeworks: Astro 5.14

From the Community

• Course: Free TypeScript tutorial (Scrimba) 
• David Brownman: Python-style kwargs in TypeScript
• Jimbly: From Steam to Floppy: Porting Modern TypeScript to Run on DOS
• JSLegendWeb: You Can Now Make PS2 Games in JavaScript 
• Discussion: Is Effect-Ts really good or is it just hype? : r/typescript

Cool Stuff

• Cool Tools: https://tiny-helpers.dev/ (by Stefan Judis) 
• Cool Games: Minnesota-made games (by Martin Grider)
• Cool Game: https://andre-lima.itch.io/now-thats-a-big-dragon 
• Cool Game: https://mookie4242.itch.io/escape-the-well 
• Cool Tools: Caddy and Vite plugin (h/t nuqayah)
• PSA: Find Missing Money & Unclaimed Property (mn.gov / Go find your state)

Sponsored by Excalibur.js
Excalibur.js is the friendly TypeScript game engine for making 2D web games. Use your TypeScript or JavaScript skills to make games! Excalibur comes out-of-the-box with everything you need to make web games, like physics, sprites, animations, sound effects, input, and particles. Design your assets with tools like Aseprite and Tiled, then load them natively using first-party plugins.

Music
Seahorse Dreams by Kubbi (Spotify)

News of the week of September 15, 2025: Shai-Hulud worm hits npm supply chain, WebAssembly 3 spec is ratified, and Elixir fans finally get their time in the spotlight. From the community: SquiggleConf was awesome, type branding and tuples, local-first app dev, and why @ts-ignore is almost always the worst option.

Chapters

• (00:00) - Welcome to the Show
• (04:36) - News: Shai-Hulud Worm Attacks Over 500 npm Packages
• (12:31) - News: WebAssembly 3 Spec is Done
• (14:05) - News: Ash Framework Announces AshTypeScript
• (15:08) - News: ts-to-zod Now Supports Zod 4
• (15:36) - News: Typebox 1.0 Release
• (17:26) - Community Highlight: SquiggleConf 2025 Happened!
• (20:51) - Community Highlight: Type Branding in TypeScript by AzraelSec
• (21:35) - Community Highlight: TypeScript Tuple Length Hacks
• (22:24) - Community Highlight: TypeScript Developer Roadmap
• (23:15) - Community Highlight: GitHub Actions Can Now Run Pure TypeScript
• (23:59) - Community Highlight: Why @ts-ignore is Almost Always the Worst Option
• (24:55) - Community Highlight: Using Node's Test Runner with TS and React
• (26:05) - Library Watch: Combinatorial CLI Options Parsing
• (27:53) - Library Watch: Valibot Helper Utilities
• (29:03) - Tool Watch: Local-first Development with FullStacked
• (31:15) - Tool Watch: Retro 3D Engine with TS Scripting API
• (32:09) - Discuss: Moving Off of TypeScript by Motion
• (41:34) - Funny Read: Is Your Son a Computer Hacker?
• (43:03) - Cool Library: Render a DOM Element as an Image
• (45:04) - Cool Tool: Pages CMS Runs on Top of Your Git Repo
• (47:08) - The Minnesota Long Goodbye

News

• Socket.dev covers Shai-Hulud: 
  • Updated and Ongoing Supply Chain Attack Targets CrowdStrike npm Packages 
  • Popular Tinycolor npm Package Compromised in Supply Chain Attack 
  • What the npm package attacks mean for us developers
• Wasm 3.0 spec completed
• Announcing AshTypeScript, part of the Ash Framework (Phoenix/Elixir)
• ts-to-zod now supports Zod 4.0
• Typebox 1.0 release

From the Community

• SquiggleConf Happened! Check out the streams (separate videos to come)
  • Day 1: https://www.youtube.com/live/C_ePbVZqXrw?si=MpRiE8n4xLNpfbV0
  • Day 2: https://www.youtube.com/live/vSXLDvvIpYE?si=cWKQTjZCx91HWJN9
• Federico (AzraelSec): Type Branding in Typescript 
• Renato: TypeScript Tuple Length 
• Evan Hahn: @ts-ignore is almost always the worst option
• Roadmap.sh: Everything You Need to Learn to be a TS Dev
• GitHub Actions can now run pure TS on Node 22/24 runners without a build step (h/t Brian Muenzenmeyer)
• Mathew Brown: Using Node's Test Runner with Typescript & React 
• Library Watch: Combinatorial CLI opt parsing
• Library Watch: Introducing: @traversable/valibot (h/t Andrew Jarret)
• Tool watch: FullStacked, a local-first app development environment
• Tool watch: Roguestrad, a Retro 3D Game engine forked from DOOM-3-BFG with TypeScript scripting support

Cool Stuff

• Funny Read: Is your son a computer hacker?
• Cool Lib: dom-to-image-more – render DOM elements as images
• Cool Tool:  Pages CMS - Hassle-free CMS for static sites powered by Git 

Sponsored by Excalibur.js
Excalibur.js is the friendly TypeScript game engine for making 2D web games. Use your TypeScript or JavaScript skills to make games! Excalibur comes out-of-the-box with everything you need to make web games, like physics, sprites, animations, sound effects, input, and particles. Design your assets with tools like Aseprite and Tiled, then load them natively using first-party plugins.

Music
Seahorse Dreams by Kubbi (Spotify)

David Blass (@ssalbdivad.dev) teaches the two fools about ArkType and its 1:1 validator type system. If you, like us, thought ArkType was only about validation, think again! David pulls back the curtain on what makes ArkType unique, how he built a type-level parser to provide helpful error messages, and why ArkType can provide soundness guarantees that go beyond even what vanilla TypeScript can offer. *waves hand* These are the array intersections you're looking for.

Chapters

• (00:00) - Introducing David Blass
• (02:39) - ArkType vs. Zod
• (04:28) - ArkType's Differences
• (06:21) - Defining ArkType Types
• (10:33) - Matching TypeScript's Syntax
• (14:24) - Detailed Editor-time Errors
• (17:14) - Type-level Testing with attest
• (18:26) - Runtime Error Checking
• (21:05) - Generating JIT-optimized Code
• (27:27) - Benchmarking ArkType's Performance
• (29:41) - Optimizing the Parser for ArkType Types
• (32:13) - Tips for Optimizing TypeScript Types
• (38:12) - Type Mapping API
• (40:20) - Set-based APIs
• (43:15) - Typing Array and Tuple Intersections
• (45:57) - ArkType's Internal Type System
• (49:01) - Serializing Types to JSON
• (50:09) - Porting Enhancements to TypeScript
• (51:55) - Compatibility with Standard Schema Spec
• (57:15) - Introspecting ArkType Types
• (01:00:10) - Use Cases for ArkType
• (01:03:34) - What's Next for ArkType?
• (01:05:59) - Getting Started with ArkType
• (01:07:56) - Where to Follow David

Resources

• ArkType.io
• ArkType Discord
• ArkType GitHub
• @ark/attest testing library

Where to Follow David

• David on BlueSky
• ArkType on BlueSky

Sponsored by Excalibur.js
Excalibur.js is the friendly TypeScript game engine for making 2D web games. Use your TypeScript or JavaScript skills to make games! Excalibur comes out-of-the-box with everything you need to make web games, like physics, sprites, animations, sound effects, input, and particles. Design your assets with tools like Aseprite and Tiled, then load them natively using first-party plugins.

Music
Seahorse Dreams by Kubbi (Spotify)

News of the week of September 8, 2025: Deno 2.5 adds a bunch of DX improvements, Fresh 2.0 is out of beta, and a supply chain attack mitigation for pnpm users. From the community: Val Town's OSS TypeScript editor, discussing underrated TS features, and tools/libraries to help make your configs, secrets, and forms type-safe.

Chapters

• (00:00) - Welcome to the Show
• (05:46) - News: TSGo Adds JSDoc Support to LSP
• (07:08) - News: Deno 2.5 Released
• (15:05) - News: Deno Fresh 2.0 is Now Out of Beta
• (15:28) - News: rspack and webpack Add Dynamic Import Tree Shaking
• (16:26) - News: pnpm 10.16 adds minimumReleaseAge Config Option
• (18:10) - Community Highlight: Dr. Axel's Corner
• (18:51) - Community Highlight: Lessons from npm Security Failures
• (23:47) - Community Highlight: Val Town's Open Source TS Editor
• (26:12) - Community Highlight: Lint Rules Spreadsheet by Josh Goldberg
• (28:16) - Community Highlight: Most Underrated Features in TS?
• (31:48) - Tool Watch: confkit Provides Type-safe Config and Secrets
• (32:46) - Library Watch: taxum, a TypeScript-first HTTP Framework
• (33:35) - Library Watch: conformal is a Type-safe FormData and Submissions Library
• (34:31) - Community Highlight: Why Using Bun in Production (Maybe) Isn't the Best Idea
• (39:14) - Secret of the Handbook: Analyze Trace Tool
• (40:37) - Cool Watch: Restoring Old GameBoys and Game Systems
• (42:04) - Cool Game: Assassin's Creed Mirage
• (44:37) - The Minnesota Long Goodbye

News

• TSGo
  • Full JSDoc Support in LSP (#1702) by Anders
  • TypeScript Build Watch Mode (#1684) by Sheetal
• Deno 2.5 + Fresh 2.0
• Rspack 1.5.3 features advanced tree shaking for dynamic import members
• Pnpm 10.16 adds “minimumReleaseAge” to help mitigate supply chain attacks

From the Community

• Dr. Axel’s Corner
  • Learning web development: Implementing web servers 
  • Learning web development: Authenticating users with plain Node.js
• OneUpTime: Lessons from npm's Security Failures 
• Wojciech Maj: Why using Bun in production (maybe) isn't the best idea
• Val Town’s open source TS editor was rewritten from scratch
• Josh Goldberg is tracking common rules across linters for Flint
• Reddit discussion: Name underrated things in Typescript
• Tool watch: https://www.confkit.dev/ (h/t HackerNews) -- Type-safe config and schemas that work across all runtimes
• Library watch: https://taxum.js.org/ (h/t DASPRiD) -- TypeScript-first HTTP framework
• Library watch: https://github.com/marcomuser/conformal -- Type-safe FormData and submissions

Cool Stuff

• Cool Tool: https://github.com/microsoft/typescript-analyze-trace
• Cool Watch: Retrofitting a broken Game Boy with modern upgrades
• Now playing: AC: Mirage

Sponsored by Excalibur.js
Excalibur.js is the friendly TypeScript game engine for making 2D web games. Use your TypeScript or JavaScript skills to make games! Excalibur comes out-of-the-box with everything you need to make web games, like physics, sprites, animations, sound effects, input, and particles. Design your assets with tools like Aseprite and Tiled, then load them natively using first-party plugins.

Music
Seahorse Dreams by Kubbi (Spotify)

News of the week of September 1, 2025: Deno Fresh 2.0 is now in beta, Swift 6.2 adds WASM support, and a serious spear-phishing attack on npm maintainers. From the community: looking back on TypeScript, optimizing immutability, type-safe state machines, sharing Wi-Fi links, and some prolific open source work.

Chapters

• (00:00) - Welcome to the Show
• (05:20) - News: New ESLint Rule to Prevent Empty Type Argument Lists
• (06:43) - News: Deno Fresh 2.0 Graduates to Beta with Vite Support
• (09:17) - News: Rolldown Will Ship as ESM-only
• (10:55) - News: Swift 6.2 Adds WASM Support
• (12:17) - Reminder: TypeScript AI Conf in San Francisco on Nov 6
• (12:42) - PSA: Upgrade Your Vite Packages
• (14:53) - PSA: Massive npm Supply Chain Attack
• (22:05) - News: GhostAction Attack Exfiltrated Secrets from GitHub Actions
• (24:42) - Community Highlight: TypeScript 1.5 Was 10 Years Ago
• (25:54) - Community Highlight: Dr. Axel's Corner
• (27:38) - Community Highlight: Perf Improvements Coming to Immer.js
• (28:40) - Community Highlight: Meta AI Piracy Case Might Owe Authors Money
• (29:26) - Library Watch: Easily Create Wi-Fi Share Links
• (30:58) - Library Watch: Type-safe State Machines
• (32:37) - Library Watch: Eclipse Modeling Framework for TypeScript
• (34:33) - Library Watch: A Tiny Translate Utility for TypeScript
• (35:13) - Community Highlight: Azat's OSS Tools
• (38:09) - This Week's TypeScript Joke
• (38:33) - Cool Library: 2D Geometry and Math Utilities
• (39:11) - Cool Watch: The Business Side of Digital Goods
• (40:18) - Cool Read: A New Way to Think by Roger Martin
• (43:47) - The Minnesota Long Goodbye

News

• typescript-eslint v8.43.0 introduces a new rule to disallow empty type arguments
• Fresh 2.0 Graduates to Beta, Adds Vite Support (h/t deno)
• Rolldown will only be shipping as ESM, dropping their CJS bundle (h/t VoidZero)
  • Clarification: It will still bundle your code as CJS; this applies only to Rolldown itself.
• Swift for Wasm: Q3 2025 Updates (h/t maxdesiatov)
• Reminder: TypeScript AI Conf is Nov 6
• PSA: Vite CVEs. Upgrade your packages!
  • CISA mailing list for cybersecurity incidents
• PSA: Hackers hijack npm packages with 2 billion weekly downloads in supply chain attack
• PSA: Hackers steal 3,325 secrets in GhostAction GitHub supply chain attack

From the Community

• TS 1.5 nostalgia (h/t rob palmer)
• Dr. Axel’s Corner
  • Learning web development: Frontend frameworks 
  • Learning web development: Installing npm packages and bundling 
• Immer.js optimizations coming
• Meta Piracy Case You might be owed $$$
  • Search LibGen, the Pirated-Books Database That Meta Used to Train AI 
  • It has affected Dan Abramov and Josh Goldberg 
• Library watch: wifi-share-link: Create shareable links over Wi-Fi with QR codes (h/t Joshua Goldberg)
• Library watch: @machinist/core for type-safe finite state machines 
• Library watch: TMF: Model-driven development for TypeScript 
• Library watch: pixltd-dev/ts-mini-translate, a simple TypeScript translation utility
• Check out Azat’s work! Including Josh Goldberg’s favorite ESLint plugin, perfectionist.
• This week's TS joke

Cool Stuff

• 2D math utilities: https://github.com/romgrk/2d-geometry 
• Video: A Complete Guide To The Business Side Of Indie Gamedev
• Book: A New Way to Think by Roger Martin (Thriftbooks)
• Game: Hollow Knight: Silksong

Sponsored by Excalibur.js
Excalibur.js is the friendly TypeScript game engine for making 2D web games. Use your TypeScript or JavaScript skills to make games! Excalibur comes out-of-the-box with everything you need to make web games, like physics, sprites, animations, sound effects, input, and particles. Design your assets with tools like Aseprite and Tiled, then load them natively using first-party plugins.

Music
Seahorse Dreams by Kubbi (Spotify)

News of the week of August 25, 2025: the two fools unpack the expected breaking changes to TSConfig in the upcoming 6.0 release, explain Node's latest LTS notable changes, and cover the latest in the JS trademark case from Deno. Plus, a PSA if you use Nx! From the community: making the case to migrate to Node's type stripping, a peek at Vitest 4, Zod's new Codecs feature, refactoring types, Rolldown is the opposite of a letdown, and a bunch of neat libraries/framework releases to watch.

Chapters

• (00:00) - Welcome to the Show
• (06:46) - News: TSGo Refactoring and Find Reference Enhancements
• (07:54) - News: Expect Some (Good) Breaking Changes in TS 6.0
• (12:26) - News: Node.js 22.19.0 LTS Notable Changes
• (18:13) - News: RsPack 1.5 Features Type Re-export Analysis
• (21:27) - News: Deno's GoFundMe to #FreeJavaScript
• (22:38) - PSA: Supply Chain Attack Against Nx Packages
• (25:49) - Community Highlight: Attend SquiggleConf 2025
• (26:43) - Case Study: How Calm.com Migrated to Node Type Stripping
• (30:13) - Community Highlight: Dr. Axel's Corner
• (33:01) - Community Highlight: Vitest 4 Sneak Peek
• (34:28) - Community Highlight: Zod 4.1 Codecs
• (36:39) - Community Highlight: Shout-out to Remco for Fixing JSX Typing Bugs
• (37:24) - Community Highlight: TypedRocks Shows You How to Refactor Type Definitions
• (38:27) - Community Highlight: Neovim Support for TSGo Spotted in the Wild
• (39:09) - Library Watch: csv-utils Helps You Deal with CSV Files
• (39:39) - Library Watch: contrastrast Provides WCAG-compliant Color Manipulation
• (41:16) - Case Study: Plaid Cut Build Time by 97% with Rolldown
• (42:17) - Framework Watch: Runner V4 Released
• (43:53) - Framework Watch: Ripple, a TypeScript UI Framework
• (45:20) - Community Highlight: Joke of the Week
• (45:48) - Secret of the Handbook: declarationMap
• (47:17) - Cool Link: MuJS for Embedding Scripting into C/C++
• (48:57) - Cool Link: Cory Doctorow is Kickstarting a Book
• (50:44) - Cool Watch: Learn Game Dev from a Nintendo Game Designer
• (52:29) - The Minnesota Long Goodbye

• Kamran's new Qwik City Foundations course (requires subscription)
• Affected by the Verizon outage? Get some monies (or try visiting the Transfer Phone/PIN page in your account)
• Alternatively, switch to Mint and save some cheddar (that's Kamran's referral link :-)

News

• TS 6.0 proposed deprecations and breaking changes
• Node 22.19.0 LTS notable changes include a new CA certificate API and unflagging WASM modules (see: source-phase imports)
• Rspack 1.5 release features type re-export analysis
• Deno's GoFundMe for #FreeJavaScript
• PSA: Nx supply chain attack (write-ups from Socket.dev and TheHackerNews)

From the Community

• SquiggleConf: September 18-19
• Calm.com: How we migrated our Rush.js monorepo to Node type stripping
• Dr. Axel
  • JavaScript’s trademark problem 
  • Learning web development: Web servers 
  • Learning web development: JavaScript exceptions
  • Learning web development: JSON and processing files in Node.js 
  • Learning web development: JavaScript Maps
• Vitest 4 will be faster!
• Zod creator explains 4.1's new codecs feature
• Uppy issue reveals a bug in JSX typing across ecosystem
• TypedRocks: Let’s Replace 100+ React Types with 3 Lines Of Code (Same Type Safety!) 
• Possible sighting of neovim TSGo support
• Library watch: doeixd/csv-utils: Helpful utils for working with csv files or arrays of objects
• Library watch: ammuench/contrastrast: A library to determine text contrast based on WCAG Standards 
• VoidZero: How PLAID Cut Build Times by 97% Migrating From Rollup To Rolldown
• Framework watch: Runner V4 released
• Framework watch: trueadm/ripple: the elegant UI framework for the web
• This week's TS Joke

Secret of the Handbook

The declarationMap config option significantly speeds up Project References performance in IDEs.

Cool Stuff

• MuJS: Introduction 
• Cory Doctorow’s Kickstarter
• Legendary Nintendo game designer published 200+ videos on gamedev for free.

Sponsored by Excalibur.js
Excalibur.js is the friendly TypeScript game engine for making 2D web games. Use your TypeScript or JavaScript skills to make games! Excalibur comes out-of-the-box with everything you need to make web games, like physics, sprites, animations, sound effects, input, and particles. Design your assets with tools like Aseprite and Tiled, then load them natively using first-party plugins.

Music
Seahorse Dreams by Kubbi (Spotify)

News of the week of August 18, 2025: one of the biggest nightly updates for TS Go, Rspack team announces a new linter, the new minor Bun release is pretty major, and Next.js 15.5 features typed routing . From the community: more learning web dev resources, an exhaustive switch utility for JSX, --strict on by default?, and whether you can really protect your code from clients. Plus, the two fools rant about feature flags.

Chapters

• (00:00) - Welcome to the Show
• (06:32) - News: TypeScript Go Got a Big Nightly Update
• (10:01) - News: Rspack Introduces Rslint
• (13:08) - News: Bun 1.2.21 Got Some Major Upgrades
• (18:10) - News: Deno 2.4.4 Improves Structured Clone Performance
• (19:21) - News: Next.js 15.5 Features Type-safe Routing
• (20:55) - News: Preact 11 Beta is Even Faster with Better Hydration
• (21:27) - News: Angular 20.2 Goes Zoneless
• (23:25) - Community Highlight: Dr. Axel's Learning Web Dev Series
• (25:08) - Community Highlight: A Hopeful PR to Enable --strict By Default
• (26:38) - Library Watch: valleys, Lightweight Runtime Data Validation
• (28:05) - Community Highlight: Hangman Written in TypeScript Types
• (28:59) - Community Highlight: Exhaustive Switch Expressions by Replo
• (31:42) - Discussion: How to Protect Code and Assets in the Browser
• (36:59) - Cool Game: Now THAT'S a Big Dragon!
• (38:05) - Cool Read: Auto-tiling with the Dual Tile Map Technique
• (38:33) - Cool Tip: Using IIFEs for Scratch Variables to Avoid Allocations
• (40:43) - Cool Vid: A Million Blades of Grass Written in LOVR and TypeScript
• (42:31) - The Minnesota Long Goodbye

• Jake Bailey: TSGO had a big nightly update
• Socket.dev: Rspack Introduces Rslint, a TypeScript-First Linter Written in Go (powered by TS Go) (repo)
• Bun 1.2.21 release notes plus blog post on how they achieved a 500x faster postMessage(string)
• Deno 2.4.4 structured clone perf improvement 
• Next.js 15.5 release notes (summary thread)
• Preact 11 sneaks in a beta
• Angular 20.2.0 features a stable zoneless API 

From the Community

• Dr. Axel: 
  • Learning web development: Booleans, comparisons and `if` statements
  • Learning web development: Loops in JavaScript
  • Learning web development: Shells and Node.js
• Daniel Rosenwasser proposed to turn `--strict` on by default 
  • Correction: It was an issue, not a PR :-)
• Lib watch: valleys (ht HN) –  Lightweight, zero-dependency library for validating arbitrary runtime data in TypeScript.
• Hangman in TypeScript types
• Discussion: Protect code & assets? : r/typescript
• Replo.computer: Exhaustive Switch Expressions in Typescript

Cool Stuff

• Blog post: Dual Tilemap Auto Tiling 
• Steam Game: Now THAT’S a Big Dragon
• Video: A million blades of grass in LOVR + TypeScript
  • LÖVR - VR version of LOVE 2D
  • TypeScriptToLua
• Join the Michigan TS Discord!

Sponsored by Excalibur.js
Excalibur.js is the friendly TypeScript game engine for making 2D web games. Use your TypeScript or JavaScript skills to make games! Excalibur comes out-of-the-box with everything you need to make web games, like physics, sprites, animations, sound effects, input, and particles. Design your assets with tools like Aseprite and Tiled, then load them natively using first-party plugins.

Music
Seahorse Dreams by Kubbi (Spotify)