Summary & Key Takeaways ​

• npm v12 has been released, notably disabling lifecycle scripts by default and introducing breaking changes.
• TypeScript 7.0 is now generally available, featuring a Go-powered compiler that claims to be 10x faster.
• Bun's creator detailed the extensive rewrite of the JavaScript runtime from Zig to Rust, with AI assistance.
• The Rust rewrite forms the foundation for the upcoming Bun 1.4 release.
• TC39's next meeting agenda includes Await Dictionary aiming for Stage 3.
• Next.js has launched a formal security release program with monthly updates.
• A supply chain attack on the jscrambler npm package was detected quickly by Socket.

Our Commentary ​

Wow, this is a packed week! npm 12 turning off install scripts by default is a huge security win, but I'm bracing for the inevitable "why isn't my package working?" issues. TypeScript 7.0 being 10x faster? That's a game-changer for large codebases. And Bun's Rust rewrite, with Claude's help, is just wild. It feels like the JavaScript ecosystem is in a constant state of exhilarating, slightly terrifying, evolution. We're all just trying to keep up.