Node.js does not need more theatrical security output. It needs better developer workflow infrastructure. It needs tools that ...

But perhaps most important is the attention to memory issues in this release. Bun inventor Jared Sumner claims that the ...

Pulumi 宣布，Bun 现在已经成为 Pulumi 完全支持的运行时环境，不再像之前那样只是作为包管理器的角色。随着 Pulumi 3.227.0 的发布，开发人员可以在 Pulumi.yaml 文件中设置 runtime: bun，然后由 Bun 执行整个基础设施程序，而不需要安装 Node.js。 在 2022 年首次发布时，Bun ...

The teams that succeed with Node.js migration are not the ones who moved fastest. They are the ones who spent the most time ...

Pulumi has announced that Bun is now a fully supported runtime for Pulumi, going beyond its previous role as merely a package ...

Elastic Security Labs quickly spotted the unfolding supply-chain attack that backdoored the popular JavaScript library Axios, ...

pnpm（高效且节省磁盘空间的 JavaScript 包管理器）发布了 pnpm 11 RC 版本。这次更新带来了多项重大改进，涵盖了性能、供应链安全以及更小、更严格的配置系统等。 pnpm 11 RC 版本的新特性包括：新增一个基于 SQLite ...

Harper 5.0 launches with an open-source core, RocksDB support, and a unified runtime for AI agents—cutting latency and ...

GlassWorm malware uses a Zig-based dropper to infect developer tools, stealing data and spreading across IDEs.

Axios, a widely used JavaScript library, is affected by a new critical vulnerability that enables attackers to chain exploits ...

Rsbuild 2.0 relies on Rspack 2.0, modernizes defaults (ESM-first, Node 20) and reduces dependencies. New APIs enhance ...

GlassWorm uses a fake WakaTime VS Code extension to infect IDEs, deploy RATs, and steal data, prompting urgent credential ...