The one with the npm security stories

An Enhanced 2FA Experience for Your npm Account — Over the past six months, GitHub has been keen to tighten up security around the publishing of npm packages with two-factor authentication at the heart of the effort. Now an array of improved 2FA features are in public beta for you to try out, but all maintainers of the top 500 npm packages will be enrolled in a mandatory fashion on May 31.

Myles Borins (GitHub)

A Community Group for Web-Interoperable JavaScript Runtimes — Cloudflare, Vercel, Shopify and core contributors to Node and Deno have got together to form a new group around the interoperability and development of standardized Web APIs for non-browser, JavaScript-based environments. So much as browsers collaborate on features, so too can backend platforms.

James M Snell

Ryan Dahl on JavaScript Containers — Ryan, originally known for Node and now Deno, thinks about JavaScript as being a universal scripting language and how the JS sandbox acts as a sort of high level version of the traditional Linux container and will only become more important in the next few years.

Ryan Dahl