JavaScript

The Deno team is joining Cloudflare to radically simplify self-hosting Workers and Durable Objects, so developers can use the same primitives in more places.

Kenton Varda and Ryan Dahl

Since joining Cloudflare, VoidZero has delivered more than 80 releases that drastically speed up JavaScript compilation, linting, and testing. From a 10x faster React compiler to Vite+ 1.0, here’s how we are building faster tools for developers and AI agents.

Evan You

Workers now enables Node.js compatibility by default, supports applications up to 64 mebibytes, and adds a URL-based module registry with import.meta, lazy compilation, shared code caches, and clearer errors.

Logan Gatlin and James Snell

Precursor, our new continuous behavioral validation engine for bot management, offers visibility into how humans and bots actually interact across the full user journey. By turning session-level behavior into bot detection signals, it identifies advanced automation with higher precision — while reducing friction for legitimate users.

Marina Elmore and Benedikt Wolters

We are opening our advanced Client-Side Security tools to all users, featuring a new cascading AI detection system. By combining graph neural networks and LLMs, we've reduced false positives by up to 200x while catching sophisticated zero-day exploits.

Zhiyuan Zheng and Juan Miguel Cejuela (Juanmi)

The Web streams API has become ubiquitous in JavaScript runtimes but was designed for a different era. Here's what a modern streaming API could (should?) look like.

James M Snell

One engineer used AI to rebuild Next.js on Vite in a week. vinext builds up to 4x faster, produces 57% smaller bundles, and deploys to Cloudflare Workers with a single command.

Steve Faulkner

A recent npm supply chain attack compromised 18 popular packages. This post explains how Cloudflare’s graph-based machine learning model, which analyzes 3.5 billion scripts daily, was built to detect and block exactly this kind of threat automatically.

Bashyam Anant, Juan Miguel Cejuela (Juanmi), Zhiyuan Zheng, Denzil Correa, Israel Adura, and Georgie Yoxall

There's no way to audit a site’s client-side code as it changes, making it hard to trust sites that use cryptography. We preview a specification we co-authored that adds auditability to the web.

Michael Rosenberg

Over the year we have greatly expanded Node.js compatibility. There are hundreds of new Node.js APIs now available that make it easier to run existing Node.js code on our platform.

James M Snell

Cap'n Web is a new open source, JavaScript-native RPC protocol for use in browsers and web servers. It provides the expressive power of Cap'n Proto, but with no schemas and no boilerplate.

Kenton Varda and Steve Faulkner

We've implemented the node:http client and server APIs in Cloudflare Workers, allowing developers to migrate existing Node.js applications with minimal code changes.

Yagiz Nizipli and James M Snell

Cloudflare Workers now support FinalizationRegistry, but just because you can use it doesn’t mean you should.

Ketan Gupta and Harris Hancock

Cloudflare Snippets are now generally available, enabling fast, cost-free JavaScript-based HTTP traffic modifications across all paid plans.

Nikita Cano

Today we're announcing our latest contribution to Node.js, now available in v23.8.0: URLPattern.

Yagiz Nizipli, James M Snell, and Daniel Lemire

Learn more about how Cloudflare developed an AI model to uncover malicious JavaScript intent using a Graph Neural Network, from pre-processing data to inferencing at scale.

Juan Miguel Cejuela (Juanmi) and Zhiyuan Zheng

Internationalization and localization require more than translation: tone, images, date/time and number formatting, among other items, need to be considered.

Alejandro Diaz-Garcia, David Fidalgo, and Nuno Pereira

We used Cloudflare’s Developer Platform and Durable Objects to build authentication and a WebSockets API that developers can use to call AI Gateway, enabling continuous communication over a single

Catarina Pires Mota and Gabriel Massadas