Are you new to React and feeling overwhelmed by its concepts and syntax? Or maybe you’re a seasoned developer looking for a quick refresher on React’s fundamentals? Either way, the folks at react.gg and ui.dev got you covered with their just released visualized guide to React.

I am trying this new “thing” of “reporting” what I was up to in a certain time period this year, and monthly reviews just sound like something normal people would do. So bear with me while I am typing up this report.

Socket’s “safe npm” is a command-line tool that wraps the npm command transparently and protects developers from malware, typo squats, install scripts, protestware, telemetry, and more. It works with all npm commands that can install new third-party code, including npm install, npm update, npm uninstall, npm rm, npm exec, and npx.

Sandworm Audit is a free and open source command-line tool designed to scan your project and dependencies for security vulnerabilities, license compliance issues, and other metadata problems. It works with any modern JavaScript package manager and supports custom license policies. With Sandworm Audit, you can generate easy-to-read reports that include JSON issue and license usage reports, CSV files of all dependencies and license information, and SVG dependency tree and treemap visualizations.

Firefox Developer Edition is a specialized version of the Firefox browser, designed for developers and early adopters. It’s kind of a beta version, but with much more features. It comes with various tools, such as the Visual Editing, Debugging, an inspector that shows you details about the used CSS Grid, unused CSS etc.

GitHub CLI has in it’s latest version introduced a new feature that allows users to store their access token in an encrypted local storage system. This new option is available through the –secure-storage flag when using the gh auth login and gh auth refresh commands.