TypeScript 2.6 Adds Strict Parameter Contravariance and More
Among new features in TypeScript 2.6 are a new flag to enforce strict parameter contravariance and improved tooling.
Facebook Overhauls ReasonML Syntax in Reason 3
Reason, Facebookâs attempt to bring OCaml safety and speed to JavaScript developers, reaches version 3, which introduces new syntax and many fixes.
Last Npm Incident Uncovers Security Vulnerability
Last week, the npm registry had an operations incident that caused a number of highly depended on packages, such as require-from-string, to become unavailable. While the incident was relatively straightforward to solve, it uncovered a major security vulnerability that could have been exploited to inject malicious code in projects using npm.
Package Containing Malicious Backdoor Makes its Way into NPM
The NPM security team removed a package masquerading as a cookie parser that actually contained a malicious backdoor, along with three other packages depending on it. The backdoor allowed attackers to inject arbitrary code into a running server and execute it.