GitHub steps up NPM supply chain security after a spate of account takeovers, while TanStack Start emerges as a full-stack contender. The React ESLint plugin helps spot unneeded useEffect(), and VanJS shows how far vanilla JavaScript can stretch for reactive UIs.
In CSS and HTML, visual media queries you probably never knew existed, a critical reevaluation of box model habits, and scrollbar gutter smoothing. There's also a CSS reset review, text-wrap visualisations, and an up-to-date Modern CSS guide.
Rounding things out: DevTools MCP automations, nostalgia for Netscape's 30-year-old launch, and a bold move off TypeScript (with React sticking around). Happy reading!
This is GitHub's response to the latest surge in damaging account takeovers on package registries, including npm.
https://github.blog/security/supply-chain-security/our-plan-for-a-more-secure-npm-supply-chain/
TanStack has grown into a full-stack router-powered framework. Clearly, the path has been visible for the last few years with TanStack Tables, DB, Router, Solid, and other building blocks.
https://tanstack.com/start/latest
This is ironic. Plugin to help out when not to use useEffect().
https://github.com/NickvanDyke/eslint-plugin-react-you-might-not-need-an-effect
For when you don’t need anything more but vanilla JS and DOM.
https://github.com/NickvanDyke/eslint-plugin-react-you-might-not-need-an-effect
Web: https://vanjs.org/
Interesting fact: I can see similarities between Solid and Svelte, for example, using simple HTML with regular class
and without special className
. Also, less verbose for sure. Still, I wouldn't use the word "hate" against React. Each frame comes with its own quirks.
https://alemtuzlak.hashnode.dev/ive-tried-solidjs-now-im-starting-to-hate-react
Anyway, there is one more post on React vs Other Frameworks
https://www.lorenstew.art/blog/react-won-by-default
Tiny Svelte lib for building RTE with Svelte
How many media queries do you know? I know some of them, but that list is so much bigger. I didn't know most of them, and some have good use cases too. Something to bookmark!
Even a super simple width
is possible to use like this @media (900px < width < 1200px)
Now you can add a special design case between size ranges.
https://frontendmasters.com/blog/learn-media-queries/
Things we still do by old habit, but it may be time to rethink.
https://www.oddbird.net/2025/09/04/box-model/
Another new CSS feature to improve scrollbar usage.
https://www.zachleat.com/web/stable-scrollbar-gutters
There was a time when jQuery was no longer part of my workflow. Now, probably it's time to un-SCSS too. The only thing I still use from SCSS is nesting, and it appears that CSS is handling that well now. https://css-tricks.com/is-it-time-to-un-sass/
It seems a very sensible way to calculate spacing and different sizes for different purposes.
https://www.oddbird.net/2025/09/23/type-units/
https://frontendmasters.com/blog/what-you-need-to-know-about-modern-css-2025-edition/
Fascinating review from Andy Bell on reset.css.
https://piccalil.li/links/the-coyier-css-starter/
Clear example of the visual difference between text-wrap: unset | balance | pretty
https://codepen.io/avstorm/pen/xbwjGzw
https://www.builder.io/blog/hire-for-designing-in-code
https://deno.com/blog/javascript-tm-gofundme
With DevTools MCP, you can verify code changes in real time, diagnose network and console errors, simulate user behaviour and even creative web automation recipes, and more.
https://addyosmani.com/blog/devtools-mcp/
Oh, that letter N and the magic of dialling in the internet sound is imprinted in my brain. Yes, I'm old. I still remember that the first thing I did on the internet was find a website to print out guitar tabs, but I don't remember which band or song that was.
https://www.jwz.org/blog/2025/09/netscape-navigator-2-0-was-released-30-years-ago-today/
This is an interesting perspective. Additionally, their frontend will be built with ReactJS.
https://engineering.usemotion.com/moving-off-of-typescript-e7bb1f3ad091