TypeScript, Security, And Type Juggling With Ariel Shulman & Liran Tal

1:25:42

In this episode, Dan and I (Steve) dove deep into what turned out to be a surprisingly complex, yet incredibly insightful topic: gradually migrating a massive legacy JavaScript project over to TypeScript. We're talking about nearly 1,000 JS files, 70,000+ lines of code, and years of developer history—all transitioning carefully to a typed, modern future. Dan walked us through how he started by setting up the project for success before converting even one file—getting CI/CD ready, setting up tsconfig.json, sorting out test dependencies, dealing with mock leaks, and even grappling with quirks between VS Code and WebStorm debugging. We talked tools (like TS-ESLint, concurrently, and ts-node), why strict typing actually uncovered real bugs (and made the code better!), and why it’s crucial not to touch any .js files until your TypeScript setup is rock solid. Key Takeaways: Gradual migration is 100% possible—and often better—than ripping the bandaid off. TypeScript can and will catch bugs hiding in your JavaScript. Be prepared! Use VS Code extensions or TS-Node to support your devs’ tooling preferences. Don't underestimate the setup phase—it’s the foundation of long-term success. Start small: Dan's team converted just one file at first to test the whole pipeline. If you’re sitting on a legacy JS project and dreaming of TypeScript, this episode is your blueprint—and your warning sign. Become a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support .…

JavaScript Jabber

1
TypeScript, Security, and Type Juggling with Ariel Shulman & Liran Tal - JSJ 679 1:32:43

7 days ago1:32:43

1:32:43

In this episode, we dove headfirst into the swirling waters of TypeScript, its real-world use cases, and where it starts to fall short—especially when it comes to security. Joining us from sunny Tel Aviv (and a slightly cooler Portland), we had the brilliant Ariel Shulman and security advocate Liran Tal bring the heat on everything from type safety to runtime vulnerabilities. We started off with a friendly debate: Has TypeScript really taken over the world? Our verdict? Pretty much. Whether it’s starter projects, enterprise codebases, or AI-generated snippets, TypeScript has become the de facto standard. But as we quickly found out, that doesn’t mean it’s perfect. Key Takeaways: -TypeScript ≠ Security We tend to trust TypeScript a bit too much. It’s a build-time tool, not a runtime enforcer. As Liran pointed out, “TypeScript is not a security tool,” and treating it like one leads to dangerous assumptions. -Type Juggling is Real (and Sneaky) We explored how something as innocent as using as string on request data can open the door to vulnerabilities like HTTP parameter pollution and prototype pollution. Just because your IDE is happy doesn’t mean your runtime is. -Enter Zod – Runtime Type Checking to the Rescue? Zod got some love for bridging the dev-time/runtime gap by validating data on the fly and inferring TypeScript types. But even Zod isn’t foolproof. For example, unless you're using .strict(), extra fields can sneak past your validations, leading to mass assignment bugs. -Common Developer Fallacies We discussed the misplaced confidence developers have in things like code coverage and TypeScript alone. One of the big takeaways: defense in depth matters. Just like testing, layering your security practices (like using Zod, type guards, and proper sanitization) is key. -TypeScript Best Practices Are Evolving From discriminated unions to avoiding any, from using Maps over plain objects to prevent prototype pollution—TypeScript developers are adapting. And tools like modern Node.js now support type stripping, which makes working with .ts files at runtime a bit easier. Become a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support .…

JavaScript Jabber

1
Building Agentic AI Workflows with Matthew Henage - JSJ 678 1:03:44

14 days ago1:03:44

1:03:44

In this episode, we sat down with full-stack developer and AI innovator Matthew Henage, creator of WAOS.ai (Web App Operating System) and the incredible storytelling platform SpeakMagic.ai. This conversation took us deep into the world of agentic AI, low-code app building, and the future of intelligent workflows. We kicked things off with Matthew sharing how he’s been riding the AI wave since GPT-3.5 blew his mind. His platform WoWs is all about making it easy for developers to build powerful web apps with embedded AI workflows — think of it like Zapier meets ChatGPT, but with agents working together instead of API chains. One of the most eye-opening parts of our chat was learning about agent swarms — essentially teams of specialized AI agents that collaborate to perform complex tasks. Instead of relying on one giant AI brain to do everything, you create smaller, purpose-built AIs that handle specific steps in a workflow. It’s scalable, smarter, and kind of like assembling your dream dev team… but all made of code. Matthew’s Speak Magic project is a jaw-dropper. It uses a swarm of over 40 agents to turn a single story idea into a fully animated, two-minute video — complete with scenes, scripts, character animations, music, and more. It’s AI storytelling on steroids. We also talked a lot about: Best practices for building reliable AI workflows The importance of keeping context windows small (under 4,000 tokens works best!) How prompt engineering is becoming the new programming Using AI for vibe coding (yes, that’s a thing) and rapid prototyping The tradeoffs between using traditional programming vs. letting AI handle logic Ethical considerations and how to handle memory and privacy in long-running user interactions Check out Matthew’s work at WAOS.ai and speakmagic.ai — and as always, stay curious and keep building! Become a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support .…

JavaScript Jabber

1
Reinventing Web Development with Brisa: A Conversation with Aral Roca - JSJ 677 1:05:09

21 days ago1:05:09

1:05:09

In this week’s episode, it’s just me — Charles Max Wood — and I’m joined by the incredibly sharp and open-source-loving Aral Roca, direct from Barcelona! Aral’s the creator of Brisa, a new full-stack web framework that flips the script on how we build modern web apps. If you thought the "another day, another framework" meme was played out... well, Brisa might just change your mind. Key Takeaways: -Brisa’s Big Idea: It's designed to let you build web apps with minimal or zero JavaScript on the client side. Think HTML streaming, server actions, and components that render server-side first, but can gradually hydrate on the client. -Server-first FTW: Aral walks us through how Brisa handles server actions — even capturing click and scroll events on the server — using ideas inspired by HTMX, LiveView, and server components from frameworks like Next.js. -Tiny and Mighty: The whole framework is incredibly lightweight. Web components come in at just ~3 KB, and the built-in i18n system is under 1 KB! -From Idea to Reality: Aral started Brisa to scratch his own itch — building side projects and blogs without bloated front-end code. But now, others are using it too (yes, even in production!), including one travel agency that's gone all-in. -Multi-platform Future: Brisa has adapters in the works for Vercel, Node, and Deno — plus integration with Tauri for building native Android, iOS, and desktop apps from the same codebase. -What's Coming: Roadmap goals include improved hot reloads, more adapters, transitions, lazy-loaded components, and a better playground for developers to tinker with. Oh, and yes — Aral does parkour. For real. This episode is packed with deep technical insight and exciting potential for a new way to build web apps — especially for devs who love fast performance, server-rendering, and clean architecture. Become a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support .…

JavaScript Jabber

1
Building Enterprise Infrastructure with Bit & AI with Gilad Shoham - JSJ 676 58:04

29 days ago58:04

58:04

In this episode, I (Steve Edwards) flew solo on the mic but had the pleasure of hosting a truly insightful conversation with Gilad Shoham, VP of Engineering at Bit.Cloud. Gilad brought the heat from Israel as we explored how Bit is revolutionizing enterprise software architecture—and how AI is being layered on top to supercharge developer productivity. We started by breaking down Bit’s core platform, which helps teams compose applications from reusable, independently versioned components. Think Lego blocks, but for your codebase. It’s all about boosting dev velocity, reducing duplication, and making collaboration across teams more seamless. Gilad walked us through some jaw-dropping features: versioning without Git, deep component CI pipelines, and even Bit’s ability to replace monolithic repositories with a graph of decoupled components. Everything is Node + TypeScript under the hood, and while it’s currently JS-focused, the ambition is clearly broader. Then came the big twist: AI. Bit is now leveraging AI not to just write code, but to compose it using existing components. Instead of bloating your codebase with endless variations of the same button, Bit’s AI understands your graph and builds features by intelligently reusing what’s already there. It’s like Copilot with a memory—and architectural sense. Key takeaways: Bit components wrap your existing code (like React/Vue) with metadata, testing, and versioning. Their infrastructure makes it possible to build and test components independently and in parallel. The AI strategy is reuse-first: generate only when needed, always compose from what already exists. Even massive enterprise codebases can gradually migrate to Bit without a full rewrite. Expect a human-in-the-loop process, but with most of the heavy lifting handled by AI. Become a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support .…

JavaScript Jabber

1
Replacing Create React App: Why Create TS Router App Is the Future of React Development - JSJ 675 1:30:48

5 weeks ago1:30:48

1:30:48

We’ve been diving into the evolving landscape of React app development and why tools like Create TS Router App (CTA) are stepping up to fill the gap left by the deprecation of Create React App (CRA). What we’ve learned is that SSR (server-side rendering) isn’t one-size-fits-all—e-commerce sites need it for SEO and performance, but internal tools and dashboards often don’t. That’s where CTA shines. It gives us a fast, modern, Vite-powered setup with TanStack Router built in, so we can start small and scale up without committing to heavy frameworks like Next.js from day one. What we love about CTA is how it keeps things familiar (same structure as CRA) while giving us type safety, file-based routing, and the flexibility to add only the features we need—like Clerk, Sentry, or even SolidJS support. Whether we’re building a simple prototype or a full-featured app, CTA makes the experience smoother, more intuitive, and future-friendly. Become a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support .…

JavaScript Jabber

1
Empowering Devs and Innovators: Inside Vercel’s Impact, Feature Flags, and the Rise of v0 - JsJ 674 1:22:20

6 weeks ago1:22:20

1:22:20

In this episode, Lee Robinson, who works at Vercel, discusses the company’s impact on web development despite its relatively small size. He explains their approach to empowering small, founder-led teams to build impactful tools, highlighting their new open-source Flags SDK. They also discuss the importance of server-side feature flagging to improve performance and reduce UI shifts, while warning against exposing sensitive data through client-side experimentation. The conversation then shifts to Vercel’s internal innovation culture, particularly the development of v0, an AI-driven tool for building full-stack web applications quickly, which is especially accessible for non-developers with creative ideas. Become a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support .…

JavaScript Jabber

1
Building 50 Apps in 50 Days: The Power of Boring Stacks with Kelvin - JsJ_673 1:00:49

7 weeks ago1:00:49

1:00:49

In this episode, we dive into an engaging conversation with Kelvin, where we explore his approach to full-stack JavaScript development and the power of using simple, stable technologies to speed up app development. Kelvin shares his exciting project, "Project 50," where he’s challenging himself to build 50 apps in 50 days, highlighting the importance of leveraging "boring" stacks to streamline the development process. We also touch on his journey in teaching web development through free resources and screencasts, aiming to make it easier for developers to build real-world apps quickly. Along the way, we discuss the value of strategy games like chess and Go, and how they help foster critical thinking and continuous learning. It’s a great mix of tech, strategy, and entertainment, making this episode a must-listen for developers and anyone looking to level up their skills. Tune in for a fun and insightful discussion! Become a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support .…

JavaScript Jabber

1
Breaking Into Tech: Lessons from My Career Path - JsJ 672 44:11

8 weeks ago44:11

44:11

This episode is a little different—thanks to a U.S. holiday, I’m flying solo. But that just means we get to have a one-on-one chat! I dive into my career journey—not to brag, but to offer insights for anyone feeling stuck, of how my inventor grandfather sparked my early interest in tech, how I transitioned from electrical engineering to computer engineering, and how I went from IT support to discovering my love for programming while solving real-world problems at Mosey with Ruby on Rails. Become a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support .…

JavaScript Jabber

1
Pioneers of Computing: A Journey Through Tech History with Bob Martin - JsJ 671 1:09:49

9 weeks ago1:09:49

1:09:49

In this episode, we dive into a fascinating mix of tech history, personal stories, and entertainment recommendations. We chat with Bob Martin, who shares insights from his new book, offering a look back at the pioneers of computing, including early breakthroughs and the industry's evolution. Bob talks about the challenges of leaving out influential figures like Margaret Hamilton, Donald Knuth, and Linus Torvalds, while also reminiscing about his early career as a self-taught developer during the 70s. The conversation takes a fun turn when we discuss some mind-blowing tech feats, including a wild project where Doom was implemented using TypeScript’s type system—a true demonstration of the power of programming languages. For those into entertainment, we share some great picks, like the classic science fiction novels When Worlds Collide and After Worlds Collide, plus a rundown of TV shows like Reacher and the intriguing comparison between the Expanse books and TV show. Packed with history, tech talk, and plenty of geeky fun, this episode is a must-listen for anyone interested in the past, present, and future of computing! Become a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support .…

JavaScript Jabber

1
Beyond Aesthetics: What the Next Generation of Frameworks Should Offer - JsJ_670 1:15:20

13 weeks ago1:15:20

1:15:20

In this episode of JavaScript Jabber, our host Charles Max Wood, panelist Dan Shappir, and special guest Yoav Abrahami, CTO of Wix Enterprise, engage in a fascinating discussion on the evolving landscape of web frameworks. They dive into the functional and nonfunctional requirements of frameworks, the emerging innovations in meta frameworks, and the significant market shifts driven by increasing regulations and AI advancements. Yoav shares insights into his work on creating a collaborative web framework aimed at bridging the gap between designers and developers, while also addressing crucial future trends in security and design-to-code capabilities. Tune in to explore the dynamic future of web development with insights from industry leaders. Become a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support .…

JavaScript Jabber

1
A Guide to AI Models: From Tokenization to Neural Networks with Ishaan Anand - JsJ_669 1:38:06

15 weeks ago1:38:06

1:38:06

In this enlightening episode of JavaScript Jabber, hosted by Charles Max Wood and Steve Edwards, panelist AJ O'Neil is joined by guest Ishaan Anand to delve deep into the intricacies of AI and large language models. Ishaan, an expert with over two decades of experience in engineering and product management, shares insights into his innovative implementation of GPT-2, providing a comprehensive breakdown of how transformers work in AI. The discussion covers various aspects of AI, including how models predict the next word, the concept of tokenization, embeddings, and the attention mechanism which is central to transformer architectures. Listen in as they explore practical applications, challenges, and the evolving landscape of AI, with a special emphasis on mentorship and education through Ishaan's unique course offering. Whether you're an AI aficionado or a JavaScript developer eager to expand your knowledge, this episode offers valuable perspectives and learning opportunities. Become a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support .…

JavaScript Jabber

1
Exploring ReactScan: Aiden Bai's Tool for Identifying React Performance Issues - JsJ 668 1:07:50

16 weeks ago1:07:50

1:07:50

In this episode of JavaScript Jabber, panelist Dan Shappir sits down with guest Aden Bai to delve into the nuances of React performance. Broadcasting from Tel Aviv, Dan welcomes Aden, who is based in San Francisco, for an insightful discussion on optimizing React apps. Aden, known for his projects Million JS and ReactScan, shares his journey into coding and his focus on enhancing web performance. Together, they explore the intricacies of the virtual DOM, React rendering processes, and the common pitfalls that developers face in managing performance. Aden introduces ReactScan, a tool designed to visualize and troubleshoot performance issues in React applications, making complex profiling accessible to a broader range of developers. The conversation also touches on broader performance metrics like Core Web Vitals and the challenges of maintaining efficiency across various devices and browsers. Whether you're a seasoned developer or new to React, this episode offers valuable insights into creating faster and more efficient web applications. Tune in to learn how you can improve your React project's performance and user experience with tools and techniques from top industry experts. Become a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support .…

JavaScript Jabber

1
TanStack: A Deep Dive into Server Functions and Routing with Tanner Linsley - JsJ 667 1:29:16

17 weeks ago1:29:16

1:29:16

In this episode of JavaScript Jabber, host Steve Edwards is joined by panelists Dan Shappir and AJ O'Neil, along with special guest Tanner Lindsley, to explore the innovative world of TanStack, a collection of open-source libraries designed to enhance web development. Tanner shares insights into the origins and evolution of TanStack, highlighting its journey from simple libraries like React Table to a comprehensive toolkit including TanStack Query, TanStack Virtual, and more. The discussion delves into the nuances of building framework-agnostic tools, the challenges of server-side rendering, and the rise of remote procedure calls (RPCs) as a modern development approach. With intriguing debates on the future of meta frameworks and the role of server components, this episode provides a deep dive into the cutting-edge technologies shaping the development landscape. Whether you're a fan of React, Solid, or just curious about the direction of web frameworks, this conversation offers valuable insights and expert opinions on the current and future state of web development. Tune in to discover how TanStack is influencing the way we build and manage applications in the ever-evolving JavaScript ecosystem. Become a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support .…

JavaScript Jabber

1
What's New in JavaScript: Latest Language Updates and Features - JSJ 666 1:26:05

19 weeks ago1:26:05