TypeScript.fm - The Friendly Show for TypeScript Developers | TypeScript 7.1 Beta, eMudhra CA Compromise & PHP2Shell, and Cloudflare's tsrs Rust Port | News

TypeScript 7.1 Beta, eMudhra CA Compromise & PHP2Shell, and Cloudflare's tsrs Rust Port | News | Ep 86

October 22, 2026 / 01:14:54/E86 Download MP3

News for the week of October 12, 2026: the internet is on fire with major security issues from a compromised CA to critical PHP vulnerabilities and remote code execution in Node.js! But at least TypeScript 7.1 beta is out, along with tsrs, a Rust port from oxc team. From the community: a game to help you create a mental model of memory mapping, which new image format is best for the web, and an interview with Daniel Rosenwasser on what comes after TS 7.

Sponsored by Excalibur.js
Excalibur.js is the free and open source friendly TypeScript 2D game engine for the web. Learn to make web games with TypeScript or JavaScript! Excalibur comes out-of-the-box with everything you need, like physics, sprites, animations, sound effects, and first-party plugins for popular 2D gamedev tools.

Homepage and Docs: https://excaliburjs.com
Make Your First Game in 10 Minutes
Join the Discord: https://discord.gg/9UemP985Uy

Chapters

(00:00) - Security: eMudhra CA Compromise Allows TLS Impersonation
(04:10) - Security: Node.js High CVE for Remote Code Execution
(05:53) - Security: PHP2Shell, Critical PHP Vulnerability
(07:45) - Security: Socket for Origin Version Control Released
(08:51) - Security: What Just Happened?
(11:37) - Tooling: TypeScript 7.1 Beta
(19:22) - Tooling: tsrs, Cloudflare's Port of TypeScript 7 to Rust
(23:28) - Tooling: tsc-ts, Porting TypeScript to TypeScript (with a C Runtime)
(24:20) - Tooling: tsc-dotnet, Experimental TypeScript Port to C#
(26:36) - Tooling: Bun Working on AOT Compilation?
(29:45) - Tooling: Elide the Polyglot Runtime is Now Stable
(32:00) - Frameworks: Astro 7.4 Features New Timings Flag for Build
(32:40) - Frameworks: TanStack Start 1.0 is Stable
(33:40) - Frameworks: Snapfire, TypeScript Web Apps Served in Rust
(37:32) - Web Platform: Firefox 158 Now Supports JPEG XL
(37:52) - Library Watch: Nuclo, Fast Lightweight DOM Updates
(39:01) - Library Watch: OpenWorkflow, an OSS Alternative to Temporal
(41:06) - Library Watch: ts-rs, Generate TypeScript Bindings from Rust Types
(42:14) - Library Watch: tmcp, a Batteries-included Alternative to Official TypeScript MCP SDK
(44:14) - Community Highlights: TypeScript Memory Mapper Game
(45:41) - Community: The Register Interviews Ryan Dahl on Deno Joining Cloudflare
(47:42) - Community: Josh Goldberg Interviews Daniel Rosenwasser on Software Engineering Daily
(48:10) - Community: Filip Sodic on Why Types Are Worth Typing
(49:26) - Community: Node Banter on Shipping TS Source in npm
(52:30) - Community: Isaac Levin Writes About Building an RSS Reader in TS
(53:13) - Community: Next.js on Improving Navigation Experience in v0
(54:02) - Community: Jake Archibald on JPEG XL vs. AVIF for Web Use Cases
(56:47) - Bleet of the Week
(57:12) - Cool Link: Breadboard Clock Series
(58:09) - Cool Link: Teal, Statically Typed Dialect of Lua
(58:33) - Cool Link: The Decoherence Trap by Maevyn.codes
(01:02:13) - The Minnesota Long Goodbye