Can we ever fix the web dependency mess?

#​768 — January 13, 2026

Read on the Web

JavaScript Weekly

Web Dependencies are Broken; Can We Fix Them? — Lea, who has worked at the heart of Web Standards for years, delivers a compelling (and educational) call to action about a problem every JavaScript developer has encountered: why is managing dependencies and introducing them into code so unnecessarily messy and what could we do about it?

Lea Verou

Build Marketing Sites Like Apple — Learn how modern, high-impact marketing sites are built from someone doing it at the highest level. Matias Gonzales, Design Engineer at Vercel, teaches GSAP animation, scroll-driven storytelling, 3D with Three.js, and performance-first techniques used on award-winning sites.

Frontend Masters sponsor

IN BRIEF:

• 📺 The full set of React Conf 2025 videos is now online, made up of 25 talks and 23 interviews, including one with four members of the core team.

• There's a tiny update in the Deno-vs-Oracle JavaScript trademark dispute with Oracle requesting, and Deno agreeing to, a 60-day extension. As it stands, the case is set to drag into 2027.

• 📘 The Concise TypeScript Book is a short, focused TypeScript guide that's open and free to read.

RELEASES:

• Node.js January 13 2026 Security Releases – Long-awaited security releases of Node.js v20.x, 22.x, 24.x, and 25.x to resolve five different vulnerabilities.

• Bun v1.3.6 – Bun.Archive can now work with tar archives, Bun.JSONC supports parsing commented JSON, plus there are many performance optimizations and tweaks.

• pnpm 10.28 – The efficient package manager adds a beforePacking hook to customize package.json's contents at publish time.

• Angular 21.1 is expected this week. v21.1 rc0 landed last week teasing some of the updates.

• Ember 6.9, ESLint v10.0.0 RC0, Rspack 1.7

📖  Articles and Videos

Date is Out, Temporal is In — The Temporal API has been promised as a future API tackling the weaknesses of JavaScript’s Date for many years now, but finally that future is arriving. Mat leans on numerous examples to show off Date's weaknesses and push Temporal’s strengths here.

Mat “Wilto” Marquis

💡 Temporal's browser support still looks weak, but Chrome 144 – rolling out generally this week – brings full support. Temporal Polyfill also offers a stop-gap while native support grows.

How Wrong Can a JavaScript Date Calculation Go? — “the story of an issue that I faced that will be much easier to handle once Temporal is more widespread.”

Phil Nash

Add GitHub, Slack & Google Integrations Without Rebuilding OAuth — WorkOS Pipes handles OAuth flows, token refresh, and storage. Users connect via a widget, your app makes one API call.

WorkOS sponsor

Stop Turning Everything Into Arrays (and Do Less Work Instead) — A post showing off iterator helpers, a broadly supported set of methods for working with Iterator objects as a more efficient way of processing data lazily in an iterative (rather than randomly accessed) fashion.

Matt Smith

How to 'Steal' Any React Component — A look at how to reproduce a component from a production React app without the original source, using React’s internal data structures (via Fiber) and LLMs to reconstruct things.

David Fant

📄 JavaScript's for-of Loops Are Actually Fast Suren Enfiajyan

📄 Why ARM Has a 'JavaScript Instruction' – FJCVTZS, specifically. NotNotP

📄 How I Write Custom Elements with lit-html Dave Samaniego

📄 document.currentScript is More Useful Than I Thought Chris Coyier

📄 What Happened (and What's Happening) to WebAssembly Emnudge

🛠 Code & Tools

memlab 2.0: A Framework for Finding JavaScript Memory Leaks — A testing and analysis framework for identifying memory leaks and optimization opportunities that spawned from Facebook’s own approach to optimizing its main app. Write scenarios, and memlab compares heap snapshots, filters memory leaks, and aggregates the results.

Facebook Open Source

The Time-Series Database That Balances Simplicity and Performance — Stay Postgres-native with automatic partitioning, 95% compression, and continuous aggregates at production scale.

Tiger Data (creators of TimescaleDB) sponsor

Fabric.js 7.1: A Powerful SVG Abstraction Library — Provides an interactive object model on top of the HTML5 canvas to make it easier to work with multiple visual elements. Ideal for the browser but it works with Node too.

Fabric.js

Ohm: A Parsing Toolkit for JavaScript and TypeScript — It’s been a few years since we covered this project and it’s come along a lot since. It’s a library for building PEG-based parsers you can use in interpreters, compilers, analysis tools, etc. and you can even play with its grammar online.

Warth, Dubroy, et al.

Superdiff 3.2: Compares Two Arrays or Objects and Return a Diff — Got two similar objects or arrays and want to see the underlying differences? Superdiff's recent updates boost performance, add support for streamed input and using a worker for more efficient diffing in a separate thread.

antoine

• JavaScriptKit 0.38 – Swift framework to interact with JavaScript via WebAssembly.

• 🎵 alphaTab 1.8 – Music notation and guitar tab rendering library.

• Neo.mjs v11.20 – Multi-threaded application engine for the Web.

• Monio 0.70.0 – Kyle Simpson's IO monad implementation.

• Ant Design 6.2 – UI design language and React UI library.

• xstyled 4.1 – Utility-first CSS-in-JS framework for React.

• Jint 4.5 – JavaScript interpreter for .NET.

📢  Elsewhere in the ecosystem

Some other interesting tidbits in the broader landscape:

• 🤖 Even Linus Torvalds is 'vibe coding' now. He's been using Google's Antigravity tool to create some digital sound effects.

• GitHub is planning to implement 'staged publishing' for npm packages in 2026 as a way to introduce a review step before releases go live.

• 🗓️ The Astro team shares a full 2025 year in review post. It's been a big year for the popular framework.

• Anil Dash shares the story of how Markdown took over the world.

• The results of the State of HTML 2025 survey are now available.

• TIL that Deno, the JavaScript runtime, is being distributed on Python's PyPI to make it easier for Python apps to call out to JavaScript as needed.

• In 2025, Bun was the third largest contributor to JavaScriptCore, the JavaScript engine powering both Safari and Bun.