--- title: "Will npm v12 reject your .npmrc?" publication: "JavaScript Weekly" issue: 792 published_at: "2026-06-30" canonical_url: "https://javascriptweekly.com/issues/792" --- Plus TypeScript 7 makes VS Code's build time 4x faster, a one-month package publishing delay, and more npm security improvements. #​792 — June 30, 2026 [Read on the Web](https://javascriptweekly.com/issues/792) Together with [![Microsoft logo\](https://res.cloudinary.com/cpress/image/upload/c_fill,g_auto,w_280,h_60/e_make_transparent/co_white,e_outline:7/om9hjsmudy5lsvba59eb.png)](https://aka.ms/posette-playlist) JavaScript Weekly [![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60,q_auto/qtj2k52lfpbuywujp0wz.jpg)](https://deno.com/blog/v2.9) [Deno 2.9 Released](https://deno.com/blog/v2.9) — A huge release for the runtime: `deno desktop` turns scripts and framework-based projects into native, self-contained desktop apps, quick migration from npm/pnpm/Yarn/Bun lockfiles, big test runner improvements, ~2x faster cold starts, and a target of Node.js 26 compatibility. Bartek Iwańczuk [![\](https://res.cloudinary.com/cpress/image/upload/c_limit,w_480,h_480,q_auto/copm/f45344d1.png)](https://aka.ms/posette-playlist) [44 Recorded PostgreSQL Talks Are Now Available to Watch](https://aka.ms/posette-playlist) — Explore 44 talks about PostgreSQL-backed app development, Postgres performance & AI, Postgres 19, Azure HorizonDB and more. All sessions are available on YouTube. Learn directly from Postgres experts at your own pace. [Check out the playlist](https://aka.ms/posette-playlist). Microsoft | AMD sponsor [Iterating Faster on VS Code with TypeScript 7](https://code.visualstudio.com/blogs/2026/06/26/iterating-faster-with-ts-7) — How the VS Code team incrementally adopted the Go-based TypeScript 7 compiler ([currently in RC](https://devblogs.microsoft.com/typescript/announcing-typescript-7-0-rc/)) while it was still being built. Type-checking the source went from 36s to 5s, with `npm run watch` going from 80s to ~20s. The VS Code Team (Microsoft) **IN BRIEF:** - The [second preview release of `npm` 12 is available](https://github.com/npm/cli/releases/tag/v12.0.0-pre.2) for testing. This is worth doing, as Colin McDonnell has already noticed [npm 12 hard-errors on unrecognized keys](https://github.com/npm/cli/issues/9699) in `.npmrc`files. - 🔒 [npm now locks 'high impact accounts'](https://github.blog/changelog/2026-06-25-npm-adds-preventive-account-protection-for-high-impact-accounts/) (maintainers of the most popular packages) into a 72-hour read-only mode when they change their email or use a 2FA recovery code. - The Svelte team has just [posted the latest monthly Svelte update](https://svelte.dev/blog/whats-new-in-svelte-july-2026). In related news, Svelte creator Rich Harris was recently asked [▶️ for his takes on working with AI and Svelte.](https://www.youtube.com/watch?v=SKjXE_wfdDY) **RELEASES:** - 🤖 [AI SDK v7](https://vercel.com/blog/ai-sdk-7) – Vercel's SDK that provides an abstraction for building against any AI model provider. - [Node.js v26.4 (Current)](https://nodejs.org/en/blog/release/v26.4.0) adds experimental [package map support](https://nodejs.org/api/packages.html#package-maps) to resolve packages from a static JSON file instead of walking `node_modules`. - [Formisch v1 RC](https://formisch.dev/blog/formisch-v1-release-candidate/) – Schema-first, headless type-safe form state library. - [Prettier 3.9](https://prettier.io/blog/2026/06/27/3.9.0), [Rspack 2.1](https://rspack.rs/blog/announcing-2-1), [Electron 43](https://github.com/electron/electron/releases/tag/v43.0.0), [ESLint 10.6](https://eslint.org/blog/2026/06/eslint-v10.6.0-released/), [pnpm 11.9](https://pnpm.io/blog/releases/11.9) 📖 Articles and Videos [Why Drizzle Couldn't Publish New Releases on npm for a Month](https://www.vlt.io/blog/packument-size-limits) — As well as explaining why the creators of [the popular ORM](https://orm.drizzle.team/) ran into the problem, Evert shares some tips to see if you're at risk of the same problem, and how to avoid it entirely. Evert Pot [The Shifting Line Between CSS States and JavaScript Events](https://css-tricks.com/css-states-and-javascript-events/) — A tour of the (more than you’d think) CSS pseudo-classes that can stand in for JS event listeners, plus a look at the experimental/future `event-trigger` syntax. Daniel Schwarz [Real-Time Analytics on Your Operational Postgres Table](https://www.tigerdata.com/go/trial?utm_source=content-syndication&utm_medium=referral&utm_campaign=javascript-weekly-newsletter) — Polling just hides the lag. TimescaleDB's continuous aggregates keep data fresh on read. [Get $1000 credit to start](https://www.tigerdata.com/go/trial?utm_source=content-syndication&utm_medium=referral&utm_campaign=javascript-weekly-newsletter). Tiger Data (Creators of TimescaleDB) sponsor [Blocking Install Scripts is Not a Silver Bullet](https://nodesource.com/blog/npm-v12-install-scripts-not-a-silver-bullet) — [npm v12](https://github.blog/changelog/2026-06-09-upcoming-breaking-changes-for-npm-v12/) won't run install scripts by default, but Ulises argues that only solves part of the supply chain security problem. Ulises Gascon [Moving Linear from styled‑components to StyleX](https://www.skovhus.dev/blog/moving-linear-from-styled-components-to-stylex) — A migration away from a runtime CSS-in-JS approach yielded ~30% faster renders when navigating between pages. Kenneth Skovhus (Linear) 📺 [How Tanner Linsley Built TanStack to Outlive Him](https://www.youtube.com/watch?v=rCJ9OdNdigQ) – A _very_ smoothly produced 15 minute interview with the creator of [TanStack](https://tanstack.com/). The Build Log 📄 [Benchmarking 5 WebSocket Servers for Node.js](https://evilmartians.com/chronicles/choose-your-fighter-benchmarking-5-websocket-servers-for-nodejs) Irina Nazarova 📄 [Handling Mutations with TanStack Query for Vue](https://www.telerik.com/blogs/handling-mutations-tanstack-query-vue) Marina Mosti 📄 [Parsing Arbitrary Dates in Strings with Chrono and a Web Component](https://www.raymondcamden.com/2026/06/24/parsing-arbitrary-dates-in-strings-with-chrono-and-a-web-component) Raymond Camden 🛠 Code & Tools [Nub: An All-in-One Toolkit That _Augments_ Node.js](https://nubjs.com/blog/introducing-nub) — While Bun or Deno can _replace_ Node, this project from [Zod](https://zod.dev/)’s creator _extends_ Node with nice-to-haves, like fuller TypeScript support, faster & more secure package installation, better `.env` handling, and [a web-standard `Worker`](https://github.com/nubjs/nub/releases/tag/v0.2.0). Colin McDonnell et al. [Gea: A Compiler-First Reactive UI Framework](https://geajs.com/) — A UI framework that goes all in on "compile the framework away": no VDOM, JSX transformed into string templates, proxy-based stores, and 'surgical' DOM patching. The big win is [_tiny_ build sizes](https://github.com/dashersw/gea#compile-to-almost-nothing). Armagan Amcalar [Stop Alt-Tabbing to the Dashboard When CI Breaks](https://fandf.co/43sXM2v) — Depot CI's new API and CLI let you query runs, pull logs, and diagnose failures without leaving your terminal. Depot sponsor [`` 2.0: Web Component for Generating QR Codes](https://github.com/educastellano/qr-code) — An easy way to display QR codes in the browser using pure JavaScript. A 13 year old solution that’s been modernized and is now ESM only. [Live demo.](https://educastellano.github.io/qr-code/demo/) Eduard Castellano [spartan/ui 1.0: shadcn/ui-Style UI Primitives for Angular](https://spartan.ng/) — If you’re an Angular developer who’s ever envied the copy and paste simplicity of [shadcn/ui](https://ui.shadcn.com/), this is for you. Robin Goetz - [Wakaru 1.6](https://github.com/pionxzh/wakaru/releases/tag/v1.6.0) – JavaScript decompiler and bundle splitter. Now with even better 'source-like' output, particularly from bundled React apps. - 🎬 [TurboRes 1.0](https://github.com/Vanilagy/turbores) – Fast Zig/WASM-powered Apple ProRes video decoder for JS environments. From the creator of [Mediabunny](https://mediabunny.dev/). - 📊 [ngx-charts 24.0](https://github.com/swimlane/ngx-charts) – Declarative charting framework for Angular. [Interactive demo](https://swimlane.github.io/ngx-charts/#/ngx-charts/bar-vertical). - [GopherJS 1.21.0](https://github.com/gopherjs/gopherjs/releases/tag/v1.21.0) – A Go to JavaScript transpiler. Now supporting up to Go 1.21.13. - [whatwg-url 17.0](https://github.com/jsdom/whatwg-url) – JS implementation of the WHATWG URL Standard. [Demo](https://jsdom.github.io/whatwg-url/). 📰 Classifieds Flaky tests slowing down dev? [Meticulous](https://www.meticulous.ai/?utm_source=jsweekly&utm_medium=newsletter&utm_campaign=26q2&utm_content=classified) gives engineers confidence to ship faster by autonomously testing every edge case of your web app. --- Build TypeScript-first AI agents in your codebase. No timeouts, durable queues, & full tracing. [Ship your first agent in minutes with Trigger.dev](https://fandf.co/3Q6idz6). 📢 Elsewhere in the ecosystem [![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60,q_auto/tcos8ddslkdxrldqs26i.jpg)](https://00f.net/2026/06/23/webassembly-runtimes-2026/) - 📊 Frank Denis wanted to [see the performance of WebAssembly runtimes in 2026](https://00f.net/2026/06/23/webassembly-runtimes-2026/) and pitted nine options against one another, including Bun and Node/V8's options. - GitHub is continuing with efforts to make project management less overwhelming in the agentic era. Now [you can restrict issue creation to collaborators with write access](https://github.blog/changelog/2026-06-29-restrict-issue-creation-to-collaborators-only/). - Meta has ported [Flow](https://flow.org/), the static type checker for its typed dialect of JavaScript, [from OCaml to Rust](https://medium.com/flow-type/flows-ocaml-to-rust-port-78b95bcf49e9). - The `pnpm` project is [working on `pnpr`](https://pnpm.io/pnpr/), an experimental pnpm-compatible npm registry server, written in Rust. - [Git 2.55 has been released](https://github.blog/open-source/git/highlights-from-git-2-55/) with `git history fixup` for 'fixing up' earlier commits, faster `git status` on Linux, and more. - 🐘 [Postgres 19 is currently in beta](https://www.postgresql.org/about/news/postgresql-19-beta-1-released-3313/), with the final release expected this September. Craig Kerstiens [looks ahead to what's interesting in Postgres 19](https://www.snowflake.com/en/blog/engineering/postgresql-19-features-beta/) for users and developers. Published by [Cooperpress](https://cooperpress.com/) and edited by [Peter Cooper](https://twitter.com/cooperx86) 'JavaScript' is a trademark of Oracle Corporation in the US We are not endorsed by or affiliated with Oracle. [Change your email address](https://javascriptweekly.com/edit_subscription/*|UID|*) or [stop getting this newsletter](https://javascriptweekly.com/leave/*|UID|*). © Cooper Press Ltd · Fairfield Enterprise Centre, Louth, LN11 0LS, United Kingdom