Friday Issue Nr.143

2025-10-03

back

GitHub steps up NPM supply chain security after a spate of account takeovers, while TanStack Start emerges as a full-stack contender. The React ESLint plugin helps spot unneeded useEffect(), and VanJS shows how far vanilla JavaScript can stretch for reactive UIs.

In CSS and HTML, visual media queries you probably never knew existed, a critical reevaluation of box model habits, and scrollbar gutter smoothing. There's also a CSS reset review, text-wrap visualisations, and an up-to-date Modern CSS guide.

Rounding things out: DevTools MCP automations, nostalgia for Netscape's 30-year-old launch, and a bold move off TypeScript (with React sticking around). Happy reading!

JavaScript News

More secure NPM supply chain

This is GitHub's response to the latest surge in damaging account takeovers on package registries, including npm.

https://github.blog/security/supply-chain-security/our-plan-for-a-more-secure-npm-supply-chain/

Tanstack Start

TanStack has grown into a full-stack router-powered framework. Clearly, the path has been visible for the last few years with TanStack Tables, DB, Router, Solid, and other building blocks.

https://tanstack.com/start/latest

React plugin to catch unnecessary useEffect()

This is ironic. Plugin to help out when not to use useEffect().

https://github.com/NickvanDyke/eslint-plugin-react-you-might-not-need-an-effect

VanJS: The Smallest Reactive UI Framework in the World

For when you don’t need anything more but vanilla JS and DOM.

https://github.com/NickvanDyke/eslint-plugin-react-you-might-not-need-an-effect

Web: https://vanjs.org/

Solid.js vs React

Interesting fact: I can see similarities between Solid and Svelte, for example, using simple HTML with regular class and without special className. Also, less verbose for sure. Still, I wouldn't use the word "hate" against React. Each frame comes with its own quirks.

https://alemtuzlak.hashnode.dev/ive-tried-solidjs-now-im-starting-to-hate-react

Anyway, there is one more post on React vs Other Frameworks

https://www.lorenstew.art/blog/react-won-by-default

Svedit

Tiny Svelte lib for building RTE with Svelte

https://svedit.dev/

HTML & CSS News

Media Queries

How many media queries do you know? I know some of them, but that list is so much bigger. I didn't know most of them, and some have good use cases too. Something to bookmark!

Even a super simple width is possible to use like this @media (900px < width < 1200px) Now you can add a special design case between size ranges.

https://frontendmasters.com/blog/learn-media-queries/

Don’t inherit the Box Model

Things we still do by old habit, but it may be time to rethink.

https://www.oddbird.net/2025/09/04/box-model/

Scrollbar gutter

Another new CSS feature to improve scrollbar usage.

https://www.zachleat.com/web/stable-scrollbar-gutters

Un-SCSS

There was a time when jQuery was no longer part of my workflow. Now, probably it's time to un-SCSS too. The only thing I still use from SCSS is nesting, and it appears that CSS is handling that well now. https://css-tricks.com/is-it-time-to-un-sass/

The Best CSS Unit Might Be a Combination

It seems a very sensible way to calculate spacing and different sizes for different purposes.

https://www.oddbird.net/2025/09/23/type-units/

Modern CSS (2025 editon)

https://frontendmasters.com/blog/what-you-need-to-know-about-modern-css-2025-edition/

CSS Reset review

Fascinating review from Andy Bell on reset.css.

https://piccalil.li/links/the-coyier-css-starter/

Text-wrap

Clear example of the visual difference between text-wrap: unset | balance | pretty

https://codepen.io/avstorm/pen/xbwjGzw

Mixed News

How to Hire for the Era of Designing in Code

https://www.builder.io/blog/hire-for-designing-in-code

Free JavaScript from Oracle

https://deno.com/blog/javascript-tm-gofundme

Chrome DevTools MCP

With DevTools MCP, you can verify code changes in real time, diagnose network and console errors, simulate user behaviour and even creative web automation recipes, and more.

https://addyosmani.com/blog/devtools-mcp/

Netscape Navigator 2.0 was released 30 years ago

Oh, that letter N and the magic of dialling in the internet sound is imprinted in my brain. Yes, I'm old. I still remember that the first thing I did on the internet was find a website to print out guitar tabs, but I don't remember which band or song that was.

https://www.jwz.org/blog/2025/09/netscape-navigator-2-0-was-released-30-years-ago-today/

Moving off of TypeScript

This is an interesting perspective. Additionally, their frontend will be built with ReactJS.

https://engineering.usemotion.com/moving-off-of-typescript-e7bb1f3ad091

Comment on BlueSky or Mastodon

Andris Švarcs

Somehow, I've survived over 15 years as a web developer without losing my interest in the craft. Quite the opposite, with so many great improvements in the Web standards, what was nearly impossible now is easy to make.

My career has been a wild ride through small agencies and big corporations, building everything from finance apps to health dashboards.

I'm that annoying person who needs to understand products beyond just slinging code. I ask questions like 'Why is this feature important?' and 'How will this improve the customer journey?' – you know, the kind of questions that make project managers reach for the pint aspirin. This curiosity has led me down the rabbit holes of design, accessibility, and SEO. Because apparently, making websites pretty, usable, and findable wasn't challenging enough on its own.

P.S. If this bio sounds too polished, blame my evil AI twin. I'm still working on teaching it sarcasm.

Copyright © since 2021, Andris Švarcs. All rights reserved.

Lets connect

bluesky

youtube

linkedin