JavaScript Weekly issue 786 covers several notable stories: a GitHub engineer's RFC proposing npm make install scripts opt-in by default to reduce supply chain security risks; Depot's deep dive into building a CI orchestrator on AWS Lambda; the Bun Rust rewrite being merged despite concerns about AI-ported code quality; Deno 2.8 teaser with Node.js compatibility improvements and TypeScript 6.0.3 support; TanStack's response to a recent npm supply chain compromise; Mark Erikson's AI-assisted development workflow using OpenCode; and the Alien Signals lightweight reactivity library. Also noted: Dr. Axel Rauschmayer taking his JS blog offline due to AI crawlers, and Express.js getting a new look and improved docs.
Sort: