The three pillars of JavaScript bloat

Hello HN users,This is a CAD by code project I have been working on on my free time for more than year now.I built it with 3 goals in mind:- It should be familiar to CAD designers who have used other programs. Same workflow, same terminology.- Reduce the mental effort required to create models as much as possible. This is achieved by:<pre><code> - Provide live rendering and visual guidance as you type.
 - Allow the user to reference existing edges&#x2F;faces on the scene instead of having to calculate everything.
 - Provide interactive mouse helpers for features that are hard to write by code: Only 3 interactive modes for now: Edge trimming, Sketch region extrude, Bezier curve drawing.
 - Implicit coding whenever possible: e.g: There are sensible defaults for most parameters. The program will automatically fuse intersecting objects together so you do not have to worry about what object needs to be fused with what.</code></pre>
- It should be reasonably fast: The scene objects are cached and only the updated objects are re-computed.I think I have achieved these goals to a good extent. The program is still in early stages and there are many features I want to add, rewrite but I think it is already usable for simple models.Update to add more details:
This is based on Opencascade.js WASM binding. So you get all the good things that come with any brep kernel. Fillets, chamfers, step import and export...The scene is webview but the editing is in your local file. You use your own editor and the environment you are familiar with.One important feature that I think make this stand out among other code based cad software is the ability to transform features not just shapes. More here:
<a href="https:&#x2F;&#x2F;fluidcad.io&#x2F;docs&#x2F;guides&#x2F;patterns" rel="nofollow">https:&#x2F;&#x2F;fluidcad.io&#x2F;docs&#x2F;guides&#x2F;patterns</a>
You can see it in action in the lantern example:
<a href="https:&#x2F;&#x2F;fluidcad.io&#x2F;docs&#x2F;tutorials&#x2F;lantern" rel="nofollow">https:&#x2F;&#x2F;fluidcad.io&#x2F;docs&#x2F;tutorials&#x2F;lantern</a>

Show HN: FluidCAD – Parametric CAD with JavaScript

JavaScript Is Enough

QuickBEAM is a JavaScript runtime embedded inside the Erlang&#x2F;OTP VM.If you’re building a full-stack app, JavaScript tends to leak in anyway — frontend, SSR, or third-party code.QuickBEAM runs that JavaScript inside OTP supervision trees.Each runtime is a process with a `Beam` global that can:
- call Elixir code
- send&#x2F;receive messages
- spawn and monitor processes
- inspect runtime&#x2F;system stateIt also provides browser-style APIs backed by OTP&#x2F;native primitives (fetch, WebSocket, Worker, BroadcastChannel, localStorage, native DOM, etc.).This makes it usable for:
- SSR
- sandboxed user code
- per-connection state
- backend JS with direct OTP interopNotable bits:- JS runtimes are supervised and restartable
- sandboxing with memory&#x2F;reduction limits and API control
- native DOM that Erlang can read directly (no string rendering step)
- no JSON boundary between JS and Erlang
- built-in TypeScript, npm support, and native addonsQuickBEAM is part of Elixir Volt — a full-stack frontend toolchain built on Erlang&#x2F;OTP with no Node.js.Still early, feedback welcome.

Show HN: QuickBEAM – run JavaScript as supervised Erlang/OTP processes

You can't cancel a JavaScript promise (except sometimes you can)

JSIR: A High-Level IR for JavaScript

Lumina – a statically typed web-native language for JavaScript and WASM

I don't chain everything in JavaScript anymore

How I made $350K from an open-source JavaScript library using dual licensing

Out with the JavaScript, in with the HTML

Obfuscation is not security – AI can deobfuscate any minified JavaScript code

Medvi is a telehealth pharmacy that has received significant media attention recently. While browsing their site with DevTools open, I noticed that their public JavaScript bundle contains a hardcoded list of 999 patient email addresses — along with each patient&#x27;s enrollment date, active status, and whether a care manager has been assigned. This data is downloaded by every visitor&#x27;s browser before any login occurs.The list isn&#x27;t a forgotten fixture. It&#x27;s actively used: the app imports it, filters for active patients, and checks whether the logged-in user&#x27;s email appears in the list to decide which UI features to display. Client-side feature flagging with real patient data baked into the bundle.The same bundle also exposes a list of Season Health (Medvi&#x27;s parent company) employee emails used to bypass checkout flows, and a separate list of Open Loop Health (their clinical provider) staff emails used to bypass intake form logic — both labeled as such in the source.This is another great demonstration that relying only on large language models for product development is premature.

Tell HN: Medvi (telehealth) hardcodes 999 patient emails in public JavaScript

Hi folks, today we&#x27;re launching QVAC SDK [0], a universal JavaScript&#x2F;TypeScript SDK for building local AI applications across desktop and mobile.The project is fully open source under the Apache 2.0 license. Our goal is to make it easier for developers to build useful local-first AI apps without having to stitch together a lot of different engines, runtimes, and platform-specific integrations. Under the hood, the SDK is built on top of QVAC Fabric [1], our cross-platform inference and fine-tuning engine.QVAC SDK uses Bare [2], a lightweight cross-platform JavaScript runtime that is part of the Pear ecosystem [3]. It can be used as a worker pretty much anywhere, with built-in tooling for Node, Bun and React Native (Hermes).A few things it supports today:<pre><code> - Local inference across desktop, mobile and servers
 - Support for LLMs, OCR, translation, transcription, 
 text-to-speech, and vision models
 - Peer-to-peer model distribution over the Holepunch stack [4],
 in a way that is similar to BitTorrent, where anyone can become a seeder
 - Plugin-based architecture, so new engines and model types can be added easily
 - Fully peer-to-peer delegated inference
</code></pre>
We also put a lot of effort into documentation [5]. The docs are structured to be readable by both humans and AI coding tools, so in practice you can often get pretty far with your favorite coding assistant very quickly.A few things we know still need work:<pre><code> - Bundle sizes are larger than we want right now because the current packaging of Bare add-ons is not as efficient as it should be yet
 - Plugin workflow can be simpler
 - Tree-shaking is already possible, but at the moment it still requires a CLI step, and we&#x27;d like to make that more automatic and better integrated into the build process
</code></pre>
This launch is only the beginning. We want to help people build local AI at a much larger scale. Any feedback is truly appreciated! Full vision is available on the official website [6].References:[0] SDK: <a href="http:&#x2F;&#x2F;qvac.tether.io&#x2F;dev&#x2F;sdk" rel="nofollow">http:&#x2F;&#x2F;qvac.tether.io&#x2F;dev&#x2F;sdk</a>[1] QVAC Fabric: <a href="https:&#x2F;&#x2F;github.com&#x2F;tetherto&#x2F;qvac-fabric-llm.cpp" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;tetherto&#x2F;qvac-fabric-llm.cpp</a>[2] Bare: <a href="https:&#x2F;&#x2F;bare.pears.com" rel="nofollow">https:&#x2F;&#x2F;bare.pears.com</a>[3] Pear Runtime: <a href="https:&#x2F;&#x2F;pears.com" rel="nofollow">https:&#x2F;&#x2F;pears.com</a>[4] Holepunch: <a href="https:&#x2F;&#x2F;holepunch.to" rel="nofollow">https:&#x2F;&#x2F;holepunch.to</a>[5] Docs: <a href="https:&#x2F;&#x2F;docs.qvac.tether.io" rel="nofollow">https:&#x2F;&#x2F;docs.qvac.tether.io</a>[6] Website: <a href="https:&#x2F;&#x2F;qvac.tether.io" rel="nofollow">https:&#x2F;&#x2F;qvac.tether.io</a>

Show HN: QVAC SDK, a universal JavaScript SDK for building local AI applications

I have been working on Dear ImGui Bundle since 2022, but it is the first time I talk about it here. It is a framework around Dear ImGui for building interactive applications in Python and C++. It comes with batteries included: Plotting, image inspection, Markdown, node editors, 3D gizmos, knobs, toggles, etc.<a href="https:&#x2F;&#x2F;imgui-bundle.pages.dev" rel="nofollow">https:&#x2F;&#x2F;imgui-bundle.pages.dev</a>It now also runs smoothly in the browser via pyodide: The playground below is a python app running in your browser (no server, no JavaScript). You can edit the code on the left and click Run. It even works on mobile.<a href="https:&#x2F;&#x2F;imgui-bundle.pages.dev&#x2F;playground" rel="nofollow">https:&#x2F;&#x2F;imgui-bundle.pages.dev&#x2F;playground</a>I have a strong interest in providing tools that help others express their creativity. This project aims to be a step in this direction as it helps develop GUIs where the code is extremely readable &amp; hackable.Some of the goals it addresses:- Bring true Immediate Mode GUI to Python and C++- A versatile range of high quality libraries: Widgets, Plots, Image Analysis, Node edition, markdown rendering- Multiplatform apps in C++: works on all platform in C++ (desktop, mobile, emscripten)- Deploy python apps to the web- High quality python bindings that are always up-to-date (because they are auto-generated)- Smooth transition between C++ and Python (same APIs for both)I&#x27;d be happy to answer questions!

Show HN: Full Python GUI apps in the browser – no JavaScript, no server

JSSE: A JavaScript Engine Built by an Agent

Critical flaw in Protobuf library enables JavaScript code execution

Building a JavaScript runtime in one month

Show HN: Endo Familiar, an O-cap based JavaScript agent sandbox

A club for websites with absolutely no JavaScript. Because documents do not need arbitrary code in them.This was originally not my idea. There used to be a NoJS club on nojs.club some years ago. But it got discontinued. So someone continued its legacy on <a href="https:&#x2F;&#x2F;no-js.club" rel="nofollow">https:&#x2F;&#x2F;no-js.club</a>. However the list is fairly outdated and many of the sites have added JavaScript in some way since they were added. I found the original domain nojs.club to be free and decided to start my own No JS club on the legacy of the original domain.

Show HN: No JavaScript Club

Thales – TypeScript compiler and JavaScript engine in Lean

JavaScript powers the web - it's **the** most important programming language you need to know as a web developer.

## Exempel 1

For example, We have an array of different objects that can weigh the same or different and are spaced apart from us.
The customer wants the lightest and closest object.

```js
object.sort((a,b)=>a.weigh - b.weigh)

 const lightest=(object[0].weigh);
 let sortDistance=(object[0].distance); 

 for (let i = 0; i< object.length; i++) { 
 if (lightest === object[i].weigh && sortDistance > object[i].distance){
 sortDistance = object[i].distance;
 sortObject.unshift(object[i]);
 }else{
 sortObject.push(object[i]);
 }
 }
```

... more comming soon

JavaScript News

News From: hn.algolia.com