#​782 — April 21, 2026

Read on the Web
Together with  Meticulous

JavaScript Weekly

HyperFrames: Write HTML and JavaScript to Create Videos — An open-source framework for creating and rendering videos with HTML and JavaScript. Essentially a simpler non-React alternative to Remotion. It includes a variety of built-in blocks/components for common video effects and elements, and can also composite existing video and audio clips. GitHub repo.

HeyGen

Still Writing Tests Manually? Meticulous AI Is Here — Notion, Dropbox, Wiz and LaunchDarkly now use a testing paradigm they can’t work without. Built by former Palantir engineers, Meticulous automatically creates an evolving suite of E2E UI tests, delivering exhaustive coverage with no developer effort.

Meticulous sponsor

The Vercel Breach That Started with a Roblox Cheat — An employee of an AI tool provider used by a Vercel employee was compromised by malware (bundled with a Roblox cheat!) and the attacker used that foothold, by way of Google Workspace, to reach a subset of Vercel customers’ environment variables.

Vercel

💡 Vercel users should follow these steps, but even if you're not one, the weak link was an OAuth grant to a third-party tool, and that pattern is nearly universal.

IN BRIEF:

RELEASES:

  • Node.js 24.15.0 (LTS) – require(esm) and the module compile cache are marked as stable, and --max-heap-size has been added.

  • Fable 5.0 – A mature F# transpiler that targets JavaScript (plus other languages). v5.0 adds .NET 10 and F# 10 support.

  • uuid 14.0 – Create RFC9562-compliant UUIDs (v1 through v7).

📖  Articles and Videos

▶  Evan You's State of Vue 2026 Talk — A month ago, Evan You (of Vue.js and VoidZero fame) gave his annual address. Less Vue-focused than usual (though Vapor Mode is “almost ready”), the talk focuses on Vite-ecosystem updates covering Vite 8, Vite+, and Void.

Evan You / Vue.js Amsterdam

How I Resolved 15K Circular Dependencies — A senior Microsoft engineer’s retrospective of clearing ~15,000 project-level circular dependencies from a 7 million line(!) TypeScript monorepo, with reusable ideas for anyone wrangling a large TS workspace.

Stefan Haas

Your Agent Ships 10 Ideas a Day. You Get 2 Databases? — Your agent builds faster than a 2-project free tier allows. ghost gives it unlimited Postgres. 1TB storage. Try free.

ghost sponsor

The Vertical Codebase — Structuring an app with folders like components/, hooks/, and utils/ feels tidy at first, but gets harder to live with over time. Dominik makes the case for a vertical, domain-first approach.

Dominik Dorfmeister

🔒 The OWASP NPM Security Best Practices Cheat Sheet — A useful, long-standing checklist that continues to be updated with recent updates tackling disabling lifecycle scripts, typosquatting, trusted publishing, and dependency confusion.

OWASP Cheat Sheet Series

How We Made the Angular Compiler Faster Using AI — Two of VoidZero’s developers wanted to see how fast an Angular compiler they could make. Very fast, it turns out.

Brooklyn and Michael Dong (VoidZero)

📄 Why I Don't Chain Everything in JavaScript Anymore – Long chains of methods vs. an easier-to-read sequence. Matt Smith

📄 The Scope of Type Guards and Assertion Functions Stefan Judis

🛠 Code & Tools

Bun v1.3.13: Smarter Testing, Streaming Installs, and Less Memory — The Bun runtime has had a great run of releases, including last week’s v1.3.12 with built-in browser automation. Now, bun test gets numerous enhancements with --isolate, --parallel, --shard and --changed options for test env isolation, parallelization, and to run only test files affected by recent changes. The runtime now uses 5% less memory, bun install gets faster, and more.

Jarred Sumner

Introducing B2B Authentication — Clerk combines Organizations, SCIM, SSO, RBAC, invites, and billing to build enterprise-ready apps.

Clerk sponsor

Animata: Over 100 Animated React Components — A suite of novel animation-focused React components you don't often see elsewhere, including animated beams, spreading cards, and a Slack-style intro screen.

Codse

📄 officeParser: A Library to Parse Common Office-Related Formats — Work with formats like docx, pptx, xlsx, odt and others used by office suites, both in the browser and server-side. GitHub repo.

Harsh Ankur

🎵 tiks: Procedural UI Sounds for the Web — Clicks, pops and pings synthesized with the Web Audio API (so it’s tiny).

Rexa

  • TypeGPU 0.11 – TypeScript WebGPU toolkit with advanced type inference and the ability to write shaders in TypeScript.

  • 📺 Shaka Player 5.1 – JavaScript library for adaptive media playback supporting DASH and HLS. (Demos.)

  • TiddlyWiki 5.4 – Self-contained JavaScript wiki for personal use. (Repo.)

  • ✂️ Knip 6.6 – Popular tool for finding and removing unused files, dependencies and exports.

  • wasm-xlsxwriter 0.13 – Generate Excel files in the browser or Node.

  • React Three Fiber 9.6 – The React renderer for Three.js.

  • np 11.2 – A better npm publish.

📰 Classifieds

HyperFormula AI SDK: Give LLMs a deterministic engine to safely read, write, and calculate spreadsheet formulas. No hallucinated math.

Gauntlet AI Night School | RAG that holds up in production requires evaluation built in from the start. Learn how. (Virtual — 4/22)

Builders Learn from Builders. From one builder to another: Join Mark Rober at Twilio SIGNAL, May 6–7 in San Francisco. Register for a discounted developer ticket here!

📢  Elsewhere in the ecosystem

  • Git 2.54 has been released with a couple of headline features:

    • git history offers a new, easy way to edit commit messages or interactively split a commit into two.

    • You can now define hooks in config files (whether in a repo, at user level, or even system level) rather than just in .git/hooks. You can also run multiple hooks for the same event in this way.

  • If you ever work with Ruby on Rails, you might find rails_vite interesting. It's a new tool that seamlessly brings the power of Vite into Rails' pipeline.

  • 💥 Anyone who's analyzed GitHub projects for a while knows this already, but there's a huge 'fake star' economy where people pay to make their projects look more popular than they are.

  • Isa Yeter explains how he migrated from DigitalOcean to Hetzner slashing his hosting bill by 84% in the process.

  • Cloudflare has released a preview of its new cf CLI tool for working with its various services.