Angular 21, Autofac Meets TS, and Shai Hulud Strikes Again | News | Ep 45

News for the week of November 17, 2025: Angular 21 is zoneless by default and adds Vitest support, plus Shai-Hulud worm hits another 500+ npm packages. What's a dev to do??? From the community: you basically know C# if you already know TypeScript and a new decorator-free dependency injection library inspired by Autofac.

Sponsored by Excalibur.js
Excalibur.js is the friendly TypeScript 2D game engine for the web. Use your TypeScript or JavaScript skills to make games! Excalibur comes out-of-the-box with everything you need to make web games, like physics, sprites, animations, sound effects, input, tile maps, particles, and more.

• Homepage and Docs: https://excaliburjs.com
• Make Your First Game in 10 Minutes
• Join the Discord: https://discord.gg/9UemP985Uy

Chapters

• (00:00) - Welcome to the Show
• (03:20) - News: Angular 21 - Zoneless by Default, Supports Vitest
• (06:18) - News: Astro 5.16 - SVG Optimization
• (07:17) - News: TC39 Proposal Advancements
• (09:26) - PSA: Shai-Hulud Worm Strikes Again with 500+ Compromised Packages
• (10:34) - Tips: Mitigating npm Supply Chain Risks
• (14:03) - Library Watch: NovaDI - Autofac-inspired Dependency Injection
• (16:11) - Library Watch: UI5 by SAP (Finally) Gets Typings
• (17:08) - Community Highlight: C# for TypeScript Developers
• (19:11) - Community Highlight: Omit for Discriminated Unions by Tkdodo
• (20:06) - Community Highlight: Convert Go Structs into TS Interfaces
• (20:26) - Community Highlight: NotNite Adds Function Hooking in Deno
• (21:12) - Bleet of the Week
• (22:07) - Cool Play: Outer Worlds 2
• (22:43) - Cool Link: Xbox Unlocks Access to Game Publishing Docs
• (23:21) - Cool Watch: JSLegend Builds a RPG in TypeScript
• (23:57) - The Minnesota Long Goodbye

News

• Announcing Angular v21  – zoneless by default, adds signal forms, and has Vitest support in CLI
• Astro 5.16 – introduced a utility type to get action schema
• TC39 Proposals Advance (h/t @robpalmer)
• Socket.dev: Shai Hulud Strikes Again (v2)
• Tip: Replace fast-glob with tinyglobby
• Tip: NPM Ignore Scripts Best Practices as Security Mitigation for Malicious Packages
• Library Watch: NovaDI - Decorator-free Dependency Injection for TypeScript 
• Library Watch: UI5 SAP gets typings

From the Community

• Charles Chen: TypeScript is Like C#
• Dominik: Omit for Discriminated Unions in TypeScript
• Karl Beuer: VSCode Extension to convert Go structs to TS interfaces 
• NotNite: function hooking in Deno

Cool Links

• Cool Read: Unlocking Access to Game Publishing Documentation for All Developers by Xbox
• Cool Watch: Making a Small RPG by JSLegend
• Cool Game: Outer Worlds 2

Music
Seahorse Dreams by Kubbi (Spotify)