please note, this only affects the default `ipx` provider on server deployments.
platform-specific providers and edge/worker runtimes don't register the route.
you can find out more in:
👉 `@nuxt/image`: github.com/nuxt/image/...
👉 `ipx`: github.com/unjs/ipx/se...
platform-specific providers and edge/worker runtimes don't register the route.
you can find out more in:
👉 `@nuxt/image`: github.com/nuxt/image/...
👉 `ipx`: github.com/unjs/ipx/se...
Integer overflow in multi-page image decoding
### Summary
A crafted multi-page source image can cause memory corruption while `ipx` decodes it. An attacker who controls the source bytes ipx reads can use a single unauthenticated request to ...
github.com
October 30, 2026 at 6:05 PM
please note, this only affects the default `ipx` provider on server deployments.
platform-specific providers and edge/worker runtimes don't register the route.
you can find out more in:
👉 `@nuxt/image`: github.com/nuxt/image/...
👉 `ipx`: github.com/unjs/ipx/se...
platform-specific providers and edge/worker runtimes don't register the route.
you can find out more in:
👉 `@nuxt/image`: github.com/nuxt/image/...
👉 `ipx`: github.com/unjs/ipx/se...
✅ unjs/jup v0.6.6 is out with Node.js 24.22.1 (LTS) security patches (high-severity TLS, DNS and brotli fixes)
github.com/unjs/jup/rel...
github.com/unjs/jup/rel...
Release v0.6.6 · unjs/jup
compare changes
📦 Updated defaults
Tool
v0.6.5
v0.6.6
npm
12.2.0
12.2.1
aube
2.8.0
2.8.1
node (default and lts)
24.22.0
24.22.1
ImportantNode.js v24.22.1 is a security release. It inc...
github.com
October 22, 2026 at 3:56 AM
✅ unjs/jup v0.6.6 is out with Node.js 24.22.1 (LTS) security patches (high-severity TLS, DNS and brotli fixes)
github.com/unjs/jup/rel...
github.com/unjs/jup/rel...
GitHub - unjs/upm: 📦 A fast, tiny package manager for the npm registry, written in TypeScript. · GitHub
GitHub - unjs/upm: 📦 A fast, tiny package manager for the npm registry, written in TypeScript. · GitHub
https://github.com/unjs/upm
github.com
October 1, 2026 at 1:11 AM
GitHub - unjs/upm: 📦 A fast, tiny package manager for the npm registry, written in TypeScript. · GitHub
September's @PostgresEDI.bsky.social #meetup: tiering cold #PostgreSQL to Apache Iceberg, and @danielroe.dev on #Postgres from Nuxt. Next in #Edinburgh 15 Oct!
vyruss.org/blog/postgre...
#OpenSource #Scotland #Database #Nuxt #UnJs #ColdFront #ApacheIceberg
vyruss.org/blog/postgre...
#OpenSource #Scotland #Database #Nuxt #UnJs #ColdFront #ApacheIceberg
PostgresEDI September 2026 Meetup Recap: tiering to Iceberg, and Postgres from Nuxt
A recap of our September meetup: my own talk on tiering cold Postgres data to Apache Iceberg, and Daniel Roe, who leads the Nuxt core team, on reaching Postgres from the other end of the stack. Next…
vyruss.org
October 1, 2026 at 2:29 PM
September's @PostgresEDI.bsky.social #meetup: tiering cold #PostgreSQL to Apache Iceberg, and @danielroe.dev on #Postgres from Nuxt. Next in #Edinburgh 15 Oct!
vyruss.org/blog/postgre...
#OpenSource #Scotland #Database #Nuxt #UnJs #ColdFront #ApacheIceberg
vyruss.org/blog/postgre...
#OpenSource #Scotland #Database #Nuxt #UnJs #ColdFront #ApacheIceberg
upm does win on cold! raw.githubusercontent.com/unjs/upm/mai...
Also in warm at least in limited benchs raw.githubusercontent.com/unjs/upm/mai...
We really don’t need more size to be faster. Actually little warm startup cost is because Node has to bootstrap ~50MB logic
Also in warm at least in limited benchs raw.githubusercontent.com/unjs/upm/mai...
We really don’t need more size to be faster. Actually little warm startup cost is because Node has to bootstrap ~50MB logic
raw.githubusercontent.com
September 30, 2026 at 7:15 AM
upm does win on cold! raw.githubusercontent.com/unjs/upm/mai...
Also in warm at least in limited benchs raw.githubusercontent.com/unjs/upm/mai...
We really don’t need more size to be faster. Actually little warm startup cost is because Node has to bootstrap ~50MB logic
Also in warm at least in limited benchs raw.githubusercontent.com/unjs/upm/mai...
We really don’t need more size to be faster. Actually little warm startup cost is because Node has to bootstrap ~50MB logic
unjs/obuild now supports minifyLibs and compressLibs options
Selectively minify bundled deps or compress them inline into self-extracting ES modules, for when disk size matters.
undici: 906 kB → 541 kB (min) → 146 kB (compressed /~5ms to extract on demand)
Selectively minify bundled deps or compress them inline into self-extracting ES modules, for when disk size matters.
undici: 906 kB → 541 kB (min) → 146 kB (compressed /~5ms to extract on demand)
September 30, 2026 at 11:01 AM
unjs/obuild now supports minifyLibs and compressLibs options
Selectively minify bundled deps or compress them inline into self-extracting ES modules, for when disk size matters.
undici: 906 kB → 541 kB (min) → 146 kB (compressed /~5ms to extract on demand)
Selectively minify bundled deps or compress them inline into self-extracting ES modules, for when disk size matters.
undici: 906 kB → 541 kB (min) → 146 kB (compressed /~5ms to extract on demand)
Release notes:
github.com/unjs/upm/rel...
Benchmarks:
- upm.sh/docs#perform...
- benchmarks.vlt.sh#/package-man...
github.com/unjs/upm/rel...
Benchmarks:
- upm.sh/docs#perform...
- benchmarks.vlt.sh#/package-man...
Release v1.3.0 · unjs/upm
compare changes
🚀 Enhancements
Minimal progress bar and shorter install output (#12)
cli: Add --verbose flag (#18)
cli: Add -v and --version (#19)
cli: upm alone installs (242fa15)
cli: Report pro...
github.com
September 30, 2026 at 10:17 AM
Release notes:
github.com/unjs/upm/rel...
Benchmarks:
- upm.sh/docs#perform...
- benchmarks.vlt.sh#/package-man...
github.com/unjs/upm/rel...
Benchmarks:
- upm.sh/docs#perform...
- benchmarks.vlt.sh#/package-man...
github.com/unjs/upm
GitHub - unjs/upm: 📦 A fast, tiny package manager for the npm registry, written in TypeScript.
GitHub - unjs/upm: 📦 A fast, tiny package manager for the npm registry, written in TypeScript.
GitHub - unjs/upm: 📦 A fast, tiny package manager for the npm registry, written in TypeScript.
github.com
September 28, 2026 at 11:55 PM
github.com/unjs/upm
GitHub - unjs/upm: 📦 A fast, tiny package manager for the npm registry, written in TypeScript.
GitHub - unjs/upm: 📦 A fast, tiny package manager for the npm registry, written in TypeScript.
TypeScriptで書かれた超軽量で高速なnpmレジストリ向けパッケージマネージャーらしい
ツールに組み込んだりプログラムから直接呼び出して使えそう
yug1224 starred unjs/upm
https://github.com/unjs/upm
ツールに組み込んだりプログラムから直接呼び出して使えそう
yug1224 starred unjs/upm
https://github.com/unjs/upm
GitHub - unjs/upm: 📦 A fast, tiny package manager for the npm registry, written in TypeScript.
github.com
September 28, 2026 at 9:03 PM
TypeScriptで書かれた超軽量で高速なnpmレジストリ向けパッケージマネージャーらしい
ツールに組み込んだりプログラムから直接呼び出して使えそう
yug1224 starred unjs/upm
https://github.com/unjs/upm
ツールに組み込んだりプログラムから直接呼び出して使えそう
yug1224 starred unjs/upm
https://github.com/unjs/upm
Just published github.com/unjs/oxbox 🐂
🛠️ A tiny, portable JS library for parsing and transforming JS/TS/JSX, powered by oxc.
⚡ Optimized wasm build in a single JS chunk
🪞 Same API as oxc-parser + oxc-transform
🤝 Works in browsers and Node.js
💾 Fits on a floppy disk
🛠️ A tiny, portable JS library for parsing and transforming JS/TS/JSX, powered by oxc.
⚡ Optimized wasm build in a single JS chunk
🪞 Same API as oxc-parser + oxc-transform
🤝 Works in browsers and Node.js
💾 Fits on a floppy disk
September 28, 2026 at 5:09 PM
Just published github.com/unjs/oxbox 🐂
🛠️ A tiny, portable JS library for parsing and transforming JS/TS/JSX, powered by oxc.
⚡ Optimized wasm build in a single JS chunk
🪞 Same API as oxc-parser + oxc-transform
🤝 Works in browsers and Node.js
💾 Fits on a floppy disk
🛠️ A tiny, portable JS library for parsing and transforming JS/TS/JSX, powered by oxc.
⚡ Optimized wasm build in a single JS chunk
🪞 Same API as oxc-parser + oxc-transform
🤝 Works in browsers and Node.js
💾 Fits on a floppy disk
This looks super useful 👀
Tracing requests right in the Nuxt CLI to see where time goes (middleware, plugins, data fetching, etc.) is going to make performance debugging so much easier 🔥
github.com/nuxt/cli/pul...
Tracing requests right in the Nuxt CLI to see where time goes (middleware, plugins, data fetching, etc.) is going to make performance debugging so much easier 🔥
github.com/nuxt/cli/pul...
feat(dev): trace requests on a timeline in the network view by danielroe · Pull Request #1582 · nuxt/cli
🔗 Linked issue
vitejs/vite#23599
unjs/hookable#169
nuxt/nuxt#36423
📚 Description
Screen.Recording.2026-09-27.at.16.58.56.mov
this adds an implementation to show...
github.com
September 29, 2026 at 2:54 PM
This looks super useful 👀
Tracing requests right in the Nuxt CLI to see where time goes (middleware, plugins, data fetching, etc.) is going to make performance debugging so much easier 🔥
github.com/nuxt/cli/pul...
Tracing requests right in the Nuxt CLI to see where time goes (middleware, plugins, data fetching, etc.) is going to make performance debugging so much easier 🔥
github.com/nuxt/cli/pul...
unjs/upm: :package: A fast, tiny package manager for the npm registry, written in TypeScript.
https://realtime.jser.info/2026/09/28/unjs-upm-a-fast-tiny-package-manager-for-the-npm-registry-written-in-typescript/
https://github.com/unjs/upm TypeScriptで書かれたnpmレジストリ向けのパッ
https://realtime.jser.info/2026/09/28/unjs-upm-a-fast-tiny-package-manager-for-the-npm-registry-written-in-typescript/
https://github.com/unjs/upm TypeScriptで書かれたnpmレジストリ向けのパッ
September 28, 2026 at 5:45 AM
unjs/upm: :package: A fast, tiny package manager for the npm registry, written in TypeScript.
https://realtime.jser.info/2026/09/28/unjs-upm-a-fast-tiny-package-manager-for-the-npm-registry-written-in-typescript/
https://github.com/unjs/upm TypeScriptで書かれたnpmレジストリ向けのパッ
https://realtime.jser.info/2026/09/28/unjs-upm-a-fast-tiny-package-manager-for-the-npm-registry-written-in-typescript/
https://github.com/unjs/upm TypeScriptで書かれたnpmレジストリ向けのパッ
TypeScriptで書かれたnpmレジストリ向けのパッケージマネージャ。
パッケージサイズが小さく、プログラムから実行できるAPIを持っている "unjs/upm: 📦 A fast, tiny package manager for the npm registry, written in TypeScript." https://github.com/unjs/upm #TypeScript #npm #Tools
パッケージサイズが小さく、プログラムから実行できるAPIを持っている "unjs/upm: 📦 A fast, tiny package manager for the npm registry, written in TypeScript." https://github.com/unjs/upm #TypeScript #npm #Tools
September 28, 2026 at 5:44 AM
TypeScriptで書かれたnpmレジストリ向けのパッケージマネージャ。
パッケージサイズが小さく、プログラムから実行できるAPIを持っている "unjs/upm: 📦 A fast, tiny package manager for the npm registry, written in TypeScript." https://github.com/unjs/upm #TypeScript #npm #Tools
パッケージサイズが小さく、プログラムから実行できるAPIを持っている "unjs/upm: 📦 A fast, tiny package manager for the npm registry, written in TypeScript." https://github.com/unjs/upm #TypeScript #npm #Tools
Whoever thought we'd witness in our lifetimes 1. a Slovenian avant-garde rock band performing North Korean operatic propaganda and 2. it would totally slap? www.youtube.com/watch?v=UNJS...
Honourable, Dead or Alive, When Following the Revolutionary Road (Arduous March version)
YouTube video by Laibach
www.youtube.com
September 9, 2026 at 5:47 PM
Whoever thought we'd witness in our lifetimes 1. a Slovenian avant-garde rock band performing North Korean operatic propaganda and 2. it would totally slap? www.youtube.com/watch?v=UNJS...
from experience, unifying efforts like corepack are very hard by nature.
especially if it is driven by somehow “biased” opinions.
I recently made jup.unjs.io but it is designed for the unjs ecosystem requirements + hopefully little more generic than corepack.
especially if it is driven by somehow “biased” opinions.
I recently made jup.unjs.io but it is designed for the unjs ecosystem requirements + hopefully little more generic than corepack.
Get started - jup
Pin and run the right package manager or runtime for every project.
jup.unjs.io
September 9, 2026 at 10:08 AM
from experience, unifying efforts like corepack are very hard by nature.
especially if it is driven by somehow “biased” opinions.
I recently made jup.unjs.io but it is designed for the unjs ecosystem requirements + hopefully little more generic than corepack.
especially if it is driven by somehow “biased” opinions.
I recently made jup.unjs.io but it is designed for the unjs ecosystem requirements + hopefully little more generic than corepack.
Thanks for your contributions in c12 and unjs ❤️
September 8, 2026 at 7:48 AM
Thanks for your contributions in c12 and unjs ❤️
🔌 consola: Elegant Console Logger for Node.js and Browser with beautiful formatting
📦 https://github.com/unjs/consola
🔗 https://github.com/javimosch/supercli
#consola #supercli
📦 https://github.com/unjs/consola
🔗 https://github.com/javimosch/supercli
#consola #supercli
September 4, 2026 at 2:44 AM
🔌 consola: Elegant Console Logger for Node.js and Browser with beautiful formatting
📦 https://github.com/unjs/consola
🔗 https://github.com/javimosch/supercli
#consola #supercli
📦 https://github.com/unjs/consola
🔗 https://github.com/javimosch/supercli
#consola #supercli
⭐️ Speaker highlight: Pooya Parsa (@pi0.io)
Creator of Nitro and UnJS, and a key member of the Nuxt core team.
From helping shape Nuxt to building the server and runtime tools powering modern JavaScript applications, Pooya’s work has had an enormous impact across the Vue and wider web ecosystem.
Creator of Nitro and UnJS, and a key member of the Nuxt core team.
From helping shape Nuxt to building the server and runtime tools powering modern JavaScript applications, Pooya’s work has had an enormous impact across the Vue and wider web ecosystem.
August 31, 2026 at 12:00 PM
⭐️ Speaker highlight: Pooya Parsa (@pi0.io)
Creator of Nitro and UnJS, and a key member of the Nuxt core team.
From helping shape Nuxt to building the server and runtime tools powering modern JavaScript applications, Pooya’s work has had an enormous impact across the Vue and wider web ecosystem.
Creator of Nitro and UnJS, and a key member of the Nuxt core team.
From helping shape Nuxt to building the server and runtime tools powering modern JavaScript applications, Pooya’s work has had an enormous impact across the Vue and wider web ecosystem.