
Security News
upm Launches as a Fast, Tiny Package Manager Written in TypeScript
upm uses Node.js to deliver fast npm installs in about 250 KB, with a JavaScript API and security defaults.
@jesscss/core
Advanced tools
This is separate from the jess package, because it contains the AST, therefore parsers can import this package to export an AST, and jess can import the parser + core. (Avoids circular dependencies.)
I've fiddled around with lots of data structures trying to find optimal node insertion / removal. With the latest code, I've eliminated most (if not all?) of mid-list insertion/deletion in array-like structures. I had a lot of code based on Queue from data-structure-typed (and tried some other structures), but Queue is really only faster when items need to be removed / added to the beginning, because of Array resizing. If we're doing only pushes & pops, no mid-list insertions, and only indexed lookups, then a native Array will always win. In those array-like structures for that library, pushes / pops, then an Array will be fine (and its an ArrayList internally).
For HashMap-like structures, I actually think using a simple extension of Map might be ideal. It's roughly the same speed as data-structure-typed's HashMap, and I can do a custom clone that utilizes a custom while loop that is currently fastest in Chrome.
FAQs
The Jess Core Library
The npm package @jesscss/core receives a total of 143 weekly downloads. As such, @jesscss/core popularity was classified as not popular.
We found that @jesscss/core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
upm uses Node.js to deliver fast npm installs in about 250 KB, with a JavaScript API and security defaults.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.