News World That's Worth

Vercel Labs Introduces scriptc : A AOT Compiler Converting TypeScript Directly to Standalone Binaries Vercel Labs has officially unveiled scriptc , an experimental Ahead-Of-Time (AOT) compiler capable of transforming TypeScript code directly into native, standalone machine binaries without requiring external runtimes like Node.js, Deno, or Bun. Because TypeScript is inherently a statically typed language, direct compilation down to native code is structurally feasible. By stripping away runtime dependencies, scriptc achieves lightweight execution metrics: Minimal Binary Size: Base binary size starts at just 170 KB . Near-Instant Startup Time: Cold starts launch in as little as 2.4 ms . Ultra-Low Memory Footprint: RAM consumption ranges between 1 MB to 4 MB . For edge cases where developers utilize dynamic JavaScript features that cannot be statically compiled, scriptc issues a compiler warning and provides a --dynamic build option. This flag embeds the lightweight quickjs-ng Ja...

Supply Chain Breach: Vercel Confirms Security Incident via Third-Party Vendor Vercel , the creator of the popular Next.js framework, has confirmed a security breach resulting from an unauthorized intrusion into its customer support vendor, Context.ai . This supply chain attack provided the attackers with a pivot point to compromise Vercel’s internal systems, ultimately leading to unauthorized access to the company’s Google Workspace environment. The Anatomy of the Attack According to the preliminary investigation, the attackers displayed a high level of technical sophistication. They demonstrated an intimate understanding of Vercel’s internal infrastructure, allowing them to navigate the environment with notable speed. While Vercel’s initial assessment suggests that sensitive data and source code remain secure , the company is taking a "safety-first" approach. They are currently contacting all potentially impacted customers and conducting a thorough forensic audit to deter...