JavaScript 每周问题 635：2023 年 4 月 20 日

npm Package Provenance: GitHub, as stewards of the official npm registry, has improved security. Since this week, if you build npm packages through GitHub Actions, you can publish the provenance of a package, allowing users to verify the repo a package was built from and how. Socket took a closer look at how it works. (DeHamer and Harrison)
New Course by Kyle Simpson: A new video course by Kyle Simpson where you'll walk through four fun challenges. Learn to apply algorithms with techniques like recursion, traversals, and acyclic paths, cover memoization to avoid garbage collection, and write more performant code. (Frontend Masters)
Node.js v20 (Current) Released: Released just two days ago, the newest major version of Node.js includes an experimental permissions model (similar to Deno), V8 11.3 (with Regexp /v flag support), the node:test test runner goes stable, official support for Windows on ARM64, and improvements to the single executable packaging mechanism. Node v20 will become the main LTS release this October. (The Node.js Team)
TypeScript 5.1 Beta: Released, allowing undefined-returning functions to have no return statement, have unrelated types for get and set accessor properties, namespaced attribute names when using JSX, etc.
React Core Team and Layoffs: The React core team appears to have been affected by Meta's latest round of layoffs (as has Relay), though Dan Abramov recently noted Meta's continued investment in the ecosystem.
Releases:
- Shoelace 2.4: A popular library of well-designed Web components.
- Node.js v18.16.0 (LTS).
- Gatsby 5.9.
Articles & Tutorials:
- Passkeys: An author's primer on passkeys and the associated WebAuthn API.
- Integrating React Flow and the Web Audio API: React Flow is suitable for building audio signal chains, with examples and useful techniques.
- Ways to Create an Enum in JavaScript: Plain objects, frozen objects, proxied objects, or a class-based approach can be used to create enums in JavaScript.
- Deno vs. Node: Deno has advantages as an alternative to Node, but Node has time, maturity, and a large userbase. (Piumi Liyana Gunawardhana)
Code & Tools:
- instant.page: A well-known option.
- Iconoir: 1300+ open source SVG icons with ways to integrate into React, React Native, Figma, etc.
- <relative-time> Element 4.3: Web component extension of <time>.
- Fable 4.1: F# to JavaScript/TypeScript compiler.
- useHotkeys 4.4: React hook for keyboard shortcuts.
- AdminJS 7.0: Admin panel for Node webapps.
- lowdb 6.0: Simple, local JSON database.
- imaskjs 6.6: Vanilla JS input masking.
- CKEditor 5 37.1: Rich text editor framework.
Jobs: Hired makes job hunting easy. Create a free profile to find JavaScript jobs. (Hired)
DPaint JS: A Web-based image editor inspired by Deluxe Paint for Commodore Amiga. (Steffest)