Ongoing research into AI agent framework security identified an exploit chain in AutoGen Studio (AutoGen’s open-source prototyping user interface) that allows untrusted web content rendered by a ...

Following recent trends, I am using AI to build a personal web service. It is a small web tool that runs solely on JavaScript without a backend server, so there is no operational burden. In the old ...

Cloudflare announced June 4 that it has acquired VoidZero, the open-source company behind the Vite build tool and the full JavaScript toolchain that surrounds it, in a move that hands governance of ...

Cloudflare acquires VoidZero and with it the team behind Vite, Vitest, and more. The tools are to remain open-source and vendor-neutral. Cloudflare is acquiring VoidZero, the company behind the ...

Founded by Evan You, VoidZero was created with the goal of building a unified, high-performance JavaScript toolchain. Rather than focusing on a single framework, the ...

Salesforce is opening its platform to React developers. The Multi-Framework beta lets developers build native Salesforce apps with React while using Salesforce authentication, security, governance, ...

Vite 8.0 has been released, and it uses Rust-built Rolldown as its single bundler, replacing both esbuild and Rollup, to enable faster builds. Vite is both a development server and a build tool for ...

Devographics has published its State of React survey, with over 3,700 developers speaking out about what they love and hate in the fractured React ecosystem. React, originally sponsored by Meta, is a ...

In early December 2025, the React core team disclosed two new vulnerabilities affecting React Server Components (RSC). These issues – Denial-of-Service and Source Code Exposure were found by security ...

I enjoyed using file-based routing since I tried Next.js (pages directory). After applying the same concept with Vite and client-side applications, I started writing blog posts covering the ...

As many as 60 malicious npm packages have been discovered in the package registry with malicious functionality to harvest hostnames, IP addresses, DNS servers, and user directories to a ...

These four reactive frameworks are all popular options for building dynamic, scalable web apps in JavaScript. Here's help choosing the right one for you. The last time I compared the leading reactive ...