https://www.devanshuverma.in/blog Thoughts on web development, React, Next.js, CSS, and building things for the web. en-US Sat, 05 Sep 2026 16:25:15 GMT https://www.devanshuverma.in/blog/tanstack-npm-supply-chain-attack-complete-guide https://www.devanshuverma.in/blog/tanstack-npm-supply-chain-attack-complete-guide Wed, 19 Aug 2026 15:21:45 GMT TanStack packages were compromised in a mass npm supply chain attack. Here's a deep-dive into what happened, how the attack worked, and the concrete steps every JavaScript developer must take to protect their projects right now. javascript security npm supply-chain tanstack https://www.devanshuverma.in/blog/minimum-release-age-package-managers-complete-guide https://www.devanshuverma.in/blog/minimum-release-age-package-managers-complete-guide Sun, 19 Jul 2026 17:21:40 GMT No package manager supports minimum release age natively — but you can enforce it. Here's a complete guide for npm, pnpm, Yarn, Bun, and Deno, plus a universal CI script that works everywhere. javascript npm security package-management devops pnpm yarn https://www.devanshuverma.in/blog/npm-rfc-install-scripts-opt-in-deep-dive https://www.devanshuverma.in/blog/npm-rfc-install-scripts-opt-in-deep-dive Mon, 01 Jun 2026 17:49:31 GMT A landmark npm RFC proposes making install scripts opt-in by default. This deep-dive covers how the current system works, why it's dangerous, what the RFC proposes, the tradeoffs involved, and how you can protect yourself right now. javascript npm security rfc supply-chain devops https://www.devanshuverma.in/blog/javascript-tail-call-optimization-runtime-reality https://www.devanshuverma.in/blog/javascript-tail-call-optimization-runtime-reality Sun, 17 May 2026 04:38:35 GMT ES6 promised tail call optimization — but V8 and Firefox never delivered. Here's what actually happens in Node.js when you write tail-recursive code, and the patterns (trampolining, iteration, generators) that actually work everywhere. javascript recursion performance optimization functional-programming node https://www.devanshuverma.in/blog/bluejs-native-binaries-without-v8-deep-dive https://www.devanshuverma.in/blog/bluejs-native-binaries-without-v8-deep-dive Sat, 16 May 2026 07:12:52 GMT BlueJS is a groundbreaking new compiler that turns JavaScript into tiny native binaries without bundling V8. We explore how it works, what it's good for, and where it fits in the future of JavaScript deployment. javascript compilation native performance tooling webdev https://www.devanshuverma.in/blog/building-my-portfolio-with-nextjs-15 https://www.devanshuverma.in/blog/building-my-portfolio-with-nextjs-15 Fri, 15 May 2026 16:00:05 GMT Every developer rewrites their portfolio eventually. Here's the stack I chose, what surprised me about Next.js 15's App Router, and a few things I'd do differently. Next.js React TypeScript CSS