JavaScript Weekly Issue 757: October 17, 2025

#757 — October 17, 2025

Together with

Bun 1.3: The Full-Stack JavaScript Runtime — Arriving a few hours after last week’s issue (natch!) Bun 1.3 remains the big news of the past week. Bun is a performance and DX-focused JavaScriptCore-powered runtime which, with v1.3, balances being a drop-in Node.js replacement with becoming a ‘full-stack runtime’ among other exciting developments:

Full‑stack dev server with hot reloading built into Bun.serve
Improved GC with lower idle CPU and memory usage.
Built-in MySQL and Redis clients (alongside Postgres and SQLite).
The ability to bundle both frontend and backend apps into a single build.
Code signing for Windows and macOS executables you build.
Isolated pnpm-esque package installs are now the default.

It also wouldn't be a big Bun release without ▶️ the obligatory release video.

The Bun Team

AI Agents? Meet External Tools — Launching an AI-powered app? Make sure your agent is securely connecting with all of your external tools and APIs. Learn more about how Auth0’s Token Vault can secure your logins and agents so your users aren’t left vulnerable and exposed.

Auth0 sponsor

Announcing Vite+ / VitePlus — Originally announced at last week's ViteConf, Evan shares more details about what this extended, unified Vite-based toolchain (now in ‘early access’) is, and the motivation behind it. Unlike regular Vite, it has a commercial angle but “will be free for individuals, open source projects, and small businesses” as well as “source available.”

Evan You

Node.js v25.0.0 (Current) Released — The latest cutting edge version of Node has arrived with Web Storage enabled by default, JSON.stringify perf improvements, a new --allow-net option in the permission model, built-in Uint8Array base64/hex conversion, and WebAssembly and JIT optimizations.

Rafael Gonzaga

IN BRIEF:

Cloudflare Sandboxes is a new service for running untrusted JavaScript (and Python) code in a safe container-based 'sandbox' environment.
The Remix project's Remix Jam event took place last week, and you can now ▶️ watch the full livestream. If you want to see the reveal and demo of Remix 3, jump to 03:24:30 in the video.
Why is typeof null === 'object'? Piotr Zarycki goes much deeper into the history than you might expect.
The Lit project is joining the OpenJS Foundation.

RELEASES:

React Native 0.82 – It's a 'new era' as React Native now runs entirely on the New Architecture.
Graffle 7.3 – GraphQL client library formerly known as graphql-request. v7.3 adds CommonJS support for compatibility with Jest and non-ESM systems.
Skeleton v4.0 – Adaptive design system powered by Tailwind CSS. See the homepage for a preview and more.

📖 Articles and Videos

Improving the Trustworthiness of JavaScript on the Web — A look at WAICT (Web Application Integrity, Consistency, and Transparency), an early-stage W3C-backed effort to bring stronger ‘app store-like’ security guarantees to the Web by ensuring the code a browser runs hasn’t been modified by attackers.

Michael Rosenberg (Cloudflare)

▶ Beyond Signals — A half-hour talk from the creator of SolidJS, exploring how signals (once pioneering, now mainstream) are shaping web development, their architectural implications, but why we’re only “at the beginning of the journey” and what comes next.

Ryan Carniato

Build Smarter Web Apps with AI-Powered JavaScript UI Controls — Build enterprise apps faster with 145+ AI-ready, high-performance JS components. Start your free trial today.

Syncfusion sponsor

Lazy Fields for 30x Speedup Without Decorators or Transforms — Some clever work from the creators of the Joist ORM.

Stephen Haberman (Joist)

🌿 A Quick Tutorial on the Barnsley Fern Fractal — The Barnsley fern is a fractal that represents a plant-like fern structure.

Slicker

💡 Slicker has other examples of implementing effects in (somewhat old school) JavaScript, including the Julia set fractal, plasma, and a fire effect.

📄 Find Where a Specific Object Was Allocated in JavaScript with DevTools – A slightly convoluted Chrome DevTools trick for tracking down where a specific object was allocated. Joona Heikkilä

📄 A Modern Guide to Reading and Writing Files in Node.js – A comprehensive guide to a variety of approaches. Luciano Mammino

📄 Refactoring a Form to a Signal Form in Angular Tim Deschryver

📄 How to Get Started with GitHub Copilot CLI Andrea Griffiths (GitHub)

🛠 Code & Tools

DOMPurify 3.3: A Fast, Tolerant XSS Sanitizer for HTML — Supports all modern browsers (as well as Node.js) and is heavily tested. There’s a live demo here.

Cure53

python-node: Integrate Python ASGI Apps with Node.js — Several months ago Platformatic unveiled php-node, a way to embed PHP directly within Node apps. Now they’re tackling Python with @platformatic/python-node, a Node-native bridge that embeds a Python interpreter and speaks ASGI.

Stephen Belanger and Matteo Collina

Tiger Lake: Real-Time Data for Dashboards, Agents & Analytics — Unify Postgres and your lakehouse for live, full-context data—no pipelines, no lag.

TigerData sponsor

jsonriver: A Simple, Fast Streaming JSON Parser — A library to parse JSON incrementally as it streams in, such as from a network request or an LLM, returning a sequence of ‘increasingly complete’ values.

Peter Burns (Google)

Kaluma 1.3: A Tiny JS Runtime for the Raspberry Pi Pico 2 — Can a JavaScript runtime squeeze onto an RP2350-based Raspberry Pi Pico 2? Kaluma can, all while offering some Node.js-like niceties. v1.3 is powered by the latest version of JerryScript, a lightweight JS engine for constrained environments.

Kaluma Project

Triplex: A Visual Workspace for Building React Components — Originally a commercial tool for laying out components in 3D scenes rendered with React Three Fiber, Triplex is now open source. Its scope has increased with a VS Code extension and support for regular React DOM elements and components too.

Mike Douges and Pmndrs

🗓️ Schedule-X 3.3 – Event calendar control. MIT licensed, but with a premium version with added features.
json-joy v17.55.0 – Real-time, collaborative editing algorithms and utilities for JSON data models.
Ky 1.12 – Simple HTTP client based upon Fetch for browsers, Node & Deno.
🗓️ React Date Picker 8.8 – Simple date picker component. (Demo.)
Faker 10.1 – Generate fabricated data to your heart's content.

📰 Classifieds

Meticulous writes and maintains your E2E UI tests. Built on Chromium with a deterministic engine, it’s the only testing tool that eliminates flakes.

🚀 Unlock 2× Team Efficiency in Just 30 Days. JS Weekly readers: Claim your free Audit by Fractional CTO and resolve your toughest SaaS issues—fast.

🕳️ 🥊 Hiring Now: Build P2P apps for mobile & desktop. Ditch servers, empower users, protect privacy. Open source. Remote EU.

📢 Elsewhere in the ecosystem

A roundup of some other interesting stories in the broader landscape:

The React team has shipped v1.0 of React Compiler, a tool for automating the optimization of React apps by way of auto-memoization applied based upon analysis of their code.
Sebastian Lague's ▶️ Simulating Smoke video presents a fascinating look at how you might model and code a fluid simulation to emulate the behavior of smoke. It's not in JavaScript but is mostly math anyway.
With this week's release of Firefox 144, all major browsers now support view transitions, a neat front-end feature.
PostgreSQL 18 was released recently and its new asynchronous I/O subsystem yields immediate performance benefits for certain workloads, as seen in these benchmarks of Postgres 17 vs Postgres 18 performed by PlanetScale.
Ever heard of HTML's <output> tag?
🐈 Cat cams! Nothing to do with programming, but meow.camera charmed me. You might need to switch cameras to actually find a cat. Not a fan of cats? Check out the Namib Desert for some bigger critters..