Modern Web Guidance 1.0 — what Chrome's web platform skills for coding agents are, how they work, the top 10 gaps they close, and how they fit our stack (component libraries, React Hook Form, DOMPurify, pinned installs)
Newsletter Roundup — Week of November 9 — covers Next.js and server framework security fixes, Node.js 27's alpha schedule, Redux Toolkit 3.0 and Parcel 3 previews, a JavaScript framework benchmark, and package freshness defenses
Newsletter Roundup — Week of November 2 — covers Node.js 26's LTS transition and security updates, TanStack Redact, an upcoming Next.js security release, and Verdaccio's staged publishing and 2FA
Type-Safe Firestore Paths in a Shared Package — how an ambient module, an empty registry interface, module augmentation and template literal types let a shared monorepo package type Firestore paths that each app defines
node:sqlite — added the Node.js APIs section and a practical SQLite guide covering parameter binding, transactions, cleanup, limitations, and alternatives
Claude Code Customization — added a guide to CLAUDE.md, skills, subagents, hooks, permissions, and MCP config, with a Copilot ↔ Claude Code mapping
AI-Assisted Development — refreshed the section: corrected OpenClaw (a personal agent, not an orchestration framework), replaced chat modes with custom agents, marked Copilot Extensions as deprecated, fixed AGENTS.md tool support, Claude Code effort and subagent controls, Cursor MCP config, and archived MCP servers; added an Agent Security section to the guidelines
Intro — added a "What belongs to Dev Hub" section that draws the line between Web Hub and the Aliz Dev Hub, and added a Dev Hub link to the site header
TanStack AI — refreshed the triage page for the 1.0 release: stable vs experimental packages, package layout with server and client snippets, a capability map, updated use/avoid guidance, the current Vercel AI SDK comparison, 0.x upgrade notes, and the open questions before it leaves triage
Vercel AI SDK — updated the TanStack AI comparison row for the 1.0 release and the current 7.x AI SDK major
Newsletter Roundup — Week of October 5 — highlights from JavaScript Weekly #804, React Status #492, and Node Weekly #642, with Vite+ release versus roadmap details, Vinext compatibility caveats, GitHub's CSS Modules performance measurements, and React-Redux and Node.js updates
AI PR Spam Is Making Maintainer Trust More Expensive — distinguishes Sorhus's AI-related PR restrictions from SWC's access policy, with curl and Mozilla examples and practical guidance on contribution accountability
Newsletter Roundup — Week of October 12 — highlights from JavaScript Weekly #805, React Status #493, and Node Weekly #643, including Vite+ 1.0, Next.js 16.4, TanStack Charts 1.0, Node.js 26.11, and npm staged publishing
What Is a Frontend Developer Worth When AI Builds the Frontend? — an evidence-based look at both sides of the "AI replaces frontend developers" debate, with studies, job-market data and executive predictions, plus a manager-facing breakdown of what a frontend developer should bring now
Newsletter Roundup — Week of October 19 — highlights from JavaScript Weekly #806, React Status #493, and Node Weekly #644, including Express security fixes, Bun's TypeScript checker, React ecosystem choices, and upcoming Node.js security releases
Newsletter Roundup — Week of October 26 — covers TypeScript 7.1 beta, TanStack Start 1.0, React and Node.js security updates, and a Next.js-to-Astro performance case study
TypeScript 7.1 Beta: The API Is Back, and Vue, Svelte, and Angular Can Follow — the new modular compiler API and its 7.x stability promise, content mappers for .vue-style files with --runExternalCode, MUI docs benchmark (~1.9x faster, ~50% less memory), import attributes on ambient modules, source phase imports, the stable es2026 target, and adoption advice per project type
TanStack AI 1.0: Stable Core, 76 Packages, and an Experimental Agent Harness — what the October 22 release stabilizes and what stays 0.x, the alpha-to-1.0 timeline, the server and client shape of a 1.0 app, everything that landed since the RC (subagents, decide(), MCP server, BYOK, new adapters and sandboxes), the 0.x upgrade path (codemod, required threadId, interrupts), the experimental agent harness, the current Vercel AI SDK comparison, and what it means for Aliz projects
EU AI Act for Frontend and Product Teams — added a practical implementation guide for Regulation (EU) 2024/1689, covering timeline milestones, role mapping (provider/deployer/importer/distributor), risk interpretation, prohibited-practice and high-risk triage, UX transparency duties, and actionable delivery checklists for product/frontend teams with a clear non-legal-advice disclaimer
React Three Fiber — added a Web 3D triage candidate covering Three.js, R3F, Drei, suitability, and alternatives
Godot Web — added a triage candidate covering integrated scene authoring, web export restrictions, and embedding constraints
Choosing a Web 3D Architecture — added a cookbook comparing React + R3F, React shell + Godot, and Godot-first through a shared evaluation workflow
React + Godot Scene Editing — added a conceptual cookbook for state ownership, secure bridging, lifecycle, undo, and versioned snapshot persistence
Triage — added Ink to the Other Libraries list as a React renderer for building terminal (CLI) UIs
Node.js with Rust for CPU-Bound Work — added a cookbook on offloading CPU-bound Node.js work to Rust via native addons (napi-rs), WebAssembly, and out-of-process sidecars, with fit criteria, complexities, and worker_threads composition
EU AI Act Compliance Guide for Product and Frontend Teams — awareness post summarizing why the EU AI Act is now an execution issue for product teams and linking to the full implementation guide (timeline, roles, risk, transparency, and delivery checklists), with explicit non-legal-advice positioning
React 19.3: View Transitions and Fragment Refs Go Stable — what the September 9 release ships: stable <ViewTransition> and Fragment Refs, addTransitionType, the browser() SSR opt-out, Trusted Types passthrough, Context in Server Components, and parallel Transitions — plus why it's a zero-migration upgrade and the three dev-only changes that can still surprise you
Newsletter Roundup — Week of September 14 — highlights from JavaScript Weekly #802 (modern web types, Vite server exposure, npm account security holds), React Status #491 (OJ's Vite-compatible Rust dev server, shadcn/lint, INP case study), and Node Weekly #641 (Node 26.9, Copilot's Rust runtime migration, Moment's path traversal fix)
Databases in the Browser: What OPFS Actually Unlocks — pegged to the September 18 DuckDB-WASM + OPFS announcement: how the Origin Private File System plus createSyncAccessHandle() turned the browser into a host for real databases (SQLite WASM, DuckDB-WASM, PGlite), why sync access handles must run in a dedicated worker, the single-writer locking reality and the readwrite/read-only/readwrite-unsafe modes, why createWritable() is the wrong DB primitive, storage persistence and eviction, and the local-first sync landscape — plus when an agency should (and shouldn't) reach for it
OJ, Vite, and the 'Slop Fork' Future Evan You Is Worried About — what Lovable's OJ actually is (a Rust reimplementation of Vite's dev-server layer, not a fork or full rewrite), why the memory win matters more than the contested speed benchmarks, and the Socket.dev/Evan You debate about AI collapsing the cost of reimplementing open-source dependencies
Sonnet 5.5, Opus 5.5 and GPT-6 Luna: The Cheap Tier Got Serious — vendor-reported pricing and benchmark comparison of the September 22–28 releases, the author's take on Claude 5.5 cost savings and running GPT-6 Luna at max effort (with caveats), API breaking changes, and GitHub Copilot availability
Newsletter Roundup — Week of August 3 — highlights from JS Weekly #796 (TypeScript 7 demo, Rust eating JS, Octane), React Status #485 (TanStack drops RSC, TanStack Charts alpha, MobX 7), and Node Weekly #635 (npm publish-time malware scanning, 11 Node security CVEs, scriptc compiler)
Morphicons: A Morph Engine for the Icons You Already Ship — a look at the 6.6 KB SVG path-interpolation engine that morphs between stroke icons from Lucide, Tabler, and Heroicons outline, plus why its four-day-old maturity and stroke-only limitation keep it out of production for now
Newsletter Roundup — Week of August 31 — highlights from JS Weekly #799 (Bun 1.4 Rust rewrite, Solid 2.0 RC, Electron 44), React Status #488 (Lovable migrates 400 routes to TanStack Start, two critical Next.js RCEs, TanStack Query 5.102), and Node Weekly #638 (Node 26.8 built-in ZIP, pnpm 12 Rust rewrite, Node.js AI contribution policy)
Vibe Coding — updated V0 section to reflect its evolution to a full-stack dev environment; updated URL from v0.dev to v0.app
AI-Assisted Development — updated V0 reference in Rapid Prototyping Tools section to v0.app and noted its expansion beyond prototyping
ECMAScript Versions — new quick-reference listing notable ES2015–ES2026 features with descriptions, MDN links, and code examples
Headless UI Components — new Headless UI subsection under Styling & UI with an overview plus dedicated Radix UI and Base UI pages: what headless/unstyled primitives are, install/import for both, the asChild vs render API difference, and Radix-vs-Base-UI decision guidance
shadcn/ui — updated to reflect Base UI as the default primitive layer (Radix now opt-in) per the July 2026 changelog; removed the stale CLI version claim and added a Headless UI cross-link
Design Systems — updated shadcn/ui table entry and Radix row to reflect Base UI as the new default primitive layer; added Base UI row; updated "Build on primitives" approach to include Base UI
React SPA Cookbook — updated shadcn/ui description from "Radix + Tailwind" to "Base UI/Radix + Tailwind"
You Don't Deserve Fable (Yet) — practical guide on building model routing discipline before adopting Claude Fable for complex tasks
shadcn/ui Makes Base UI the Default — Radix Is Now Opt-In — coverage of shadcn/ui's July 2026 switch to Base UI as its default primitive layer: why (2-to-1 adoption in shadcn create), that Radix remains fully supported, the asChild→render change, and the agent-driven migration skill
Newsletter Roundup — Week of July 21 — highlights from JS Weekly #795, React Status #483, and Node Weekly #634: framework benchmarks, Pete Hunt leading Next.js, Rolldown 1.2, shadcn/typeset, Node security releases, and npm supply chain threats
Newsletter Roundup — Week of July 27 — highlights from React Status #484 (state management debate, shadcn/ui + React Aria, React DoS patch, Shopify's Preact migration), plus JS/Node security updates
My Model Usage, July 2026: Receipts for the Routing Theory — a first-person breakdown of a month of token telemetry: Opus as orchestrator, ~40% of tokens pushed onto small models via subagent routing, and Sonnet as the identified gap for August
State of CSS 2026: The Feature Everyone Wants Is the One Nobody Can Ship — analysis of the State of CSS 2026 survey results: anchor positioning as both the most-adopted and most-blocked feature, usage tracking Baseline age, CSS as the layer AI still can't write, cognitive overload as the #1 pain point, the "no framework" trend, and the keyboard-only testing gap
Container Queries — fixed Baseline status: corrected from "Widely available since February 2023" to "Widely available since August 2025" (February 2023 was Newly available)
HTML Sanitizer API — updated to reflect redesigned API: corrected Sanitizer constructor option names and browser support versions per current MDN documentation
Performance & Core Web Vitals — fixed INP metric description: clarified it reports near-worst-case (98th percentile for 50+ interactions), not absolute worst-case
Visual Regression Testing with Vitest — new standalone recipe (split out of Testing Strategy) covering Vitest 4 provider packages, locator-based toMatchScreenshot, baseline workflow, and CI/OS consistency caveats; Testing Strategy now carries a short summary linking the recipe
Firebase — new Backend Services tech stack category with Firebase as the recommended BaaS: rationale, alternatives, pricing tiers, and when-not-to-use guidance
Token Consumption Optimization — new guide covering strategies to reduce AI tool token consumption, ordered by impact: model selection, thinking effort, multi-agent model routing, context management, conversation compaction, and usage analysis; expanded subagent section with guidance on delegating file search and reading to small utility models
npm Workspaces — new learning page covering workspace setup, command targeting, cross-workspace linking, the semver-match registry fallback, and limitations vs pnpm/Yarn
Publishing from a Monorepo — corrected workspace protocol support: npm does not support the workspace: protocol (pnpm and Yarn Berry do)
AI Assistant Chat cookbook — added note that TanStack Virtual is under evaluation for replacing scroll anchor flags in Zustand, with link to the chat primitives blog post
AI-Assisted Development — added LLM Wiki blog series links to Further Reading (LLM Wiki pattern, Aliz Web Hub implementation, local models, and OKF v0.1 formal spec)
Triage — restructured into folder with dedicated AI Tooling sub-section; added Vercel AI SDK and MCP Apps evaluation pages
MCP Servers — added section on the 2026-07-28 specification release candidate: stateless core redesign, MCP Apps, Tasks extension, observability headers, and deprecated features (Roots, Sampling, Logging) with July 2027 sunset
MCP Servers — added MDN Web Docs MCP Server section: remote HTTP server (https://mcp.mdn.mozilla.net/) providing mcp_mdn_search, mcp_mdn_get-doc, and mcp_mdn_get-compat tools; already configured in the project's .vscode/mcp.json
Security Overview — corrected SameSite cookie default: SameSite=Lax is the default only in Chromium-based browsers (Chrome 80+, Edge 86); Firefox and Safari do not yet default to Lax
HTML Sanitizer API — corrected experimental browser support to Chrome 146+ (was Chrome 124+)
URLPattern — corrected Safari support to Safari 26+ (was Safari 16.4+)
Container Queries — updated CSS container style queries browser support to include Safari 18+ and Firefox 151+ alongside Chrome/Edge 111+
Zod — added LLM structured output as a When to use case: constraining model responses with Zod 4's z.toJSONSchema() across OpenAI, Anthropic, and Gemini
Triage — added Pulumi (TypeScript SDK) for evaluation as an IaC solution for Node.js and frontend projects
Vercel Eve — new triage entry for Vercel's filesystem-first AI agent framework
Deno — added to discouraged section; recommend Node.js unless specific requirement
Bun — added to discouraged section; recommend Node.js unless specific requirement
pnpm — added to discouraged section; npm is the recommended package manager
Yarn — added to discouraged section; npm is the recommended package manager
npm — updated "When NOT to use" section to reflect pnpm/Yarn as discouraged
Trusted Types API — new browser API guide covering DOM XSS prevention via type enforcement, CSP configuration, DOMPurify integration, and migration strategy
Copilot SDK: What You Can Build With It — practical overview of the Copilot SDK as a programmable agent runtime: usage ideas, comparison with LangGraph/CrewAI, cookbook patterns, and decision guidance
Copilot Automations: Your AI Team Member That Never Sleeps 🤖⏰ — blog post covering scheduled and event-driven Copilot Automations: use cases (daily docs updates, micro-refactors, issue triage, PR reports), comparison with GitHub Actions, and configuration examples. Updated to match official GitHub docs: corrected plan availability, trigger types, setup steps, and added secrets/privacy guidance
The LLM Wiki Now Has a Formal Spec — OKF v0.1 📐 — analysis of the Open Knowledge Format v0.1, a vendor-neutral spec that formalizes the LLM Wiki pattern into an interoperable standard for AI-consumable knowledge
Added web-api-fact-check.instructions.md — Copilot instruction that enforces fact-checking Web API, CSS, and HTTP references against MDN Web Docs before publishing
Pinned GitHub Actions to full-length commit SHAs for supply chain security (docs-build workflow)
Removed the leftover Docusaurus tutorial boilerplate (docs-tutorial/) from the docs sidebar
Removed Docusaurus scaffold blog posts and sample author entries from blog/authors.yml
Added .vscode/mcp.json — MDN MCP server configured for the repository; connects VS Code Copilot to https://mcp.mdn.mozilla.net/ for web platform documentation and compatibility lookups
Updated web-api-fact-check.instructions.md — integrated MDN MCP server tools (mcp_mdn_search, mcp_mdn_get-doc, mcp_mdn_get-compat) as the primary verification method; manual MDN URL lookups become the fallback when MCP is unavailable
AI-Assisted Development — complete new section covering the full spectrum from autocomplete to multi-agent pipelines, including agent skills, prompt engineering, MCP servers, and vibe coding
UI/UX Design — new section with laws of UX, visual design, accessibility, UI patterns, and design tools
Security — added section with prototype pollution docs and OWASP-based npm security checklist
Tech Stack — the curated set of recommended tools for Aliz frontend projects, covering Build & Dev (Vite, Vitest, Playwright), Core (React, TypeScript), Data Visualization (Recharts, ECharts), State & Data (TanStack Query), and Styling & UI (Tailwind CSS, shadcn/ui, MUI)
Rendering — architecture strategies and trade-offs (SSR, SSG, CSR, ISR)
Testing — three-layer testing strategy (unit, visual regression, E2E) with Vitest and Playwright coverage
Requirement Engineering — expanded with B2B/B2C considerations, browser support, i18n, accessibility, and performance metrics
Estimation — new Cookbooks section with React SPA recipe and complexity factors reference
