JavaScript · Review & Verify
Review & Verify JavaScript
How generated code fails in this language, and the checks that catch it before your users do.
Know the failure modes
01
The JavaScript mistakes language models actually make
Async is where most of it lives. The rest is stale idioms from a decade of training data written before the language got good.
02
npm dependency hygiene: install scripts, slopsquatting and transitive bloat
npm is the largest supply-chain surface in software, and the only major ecosystem where installing a package runs arbitrary code before you have written a line.
03
Security review checklist for AI-generated JavaScript
No compiler, a dynamic object model and the largest dependency ecosystem in software. The vulnerabilities that recur in generated JS follow from all three.
04
The performance traps in generated JavaScript
Node is single-threaded, so a performance bug is an availability bug. Every item here is really the same item: something blocked the event loop or ran unbounded.
Get the JavaScript agent pack
A battle-tested AGENTS.md, the review checklist, and the failure-mode cheat sheet for JavaScript. One email, then occasional updates when the tooling shifts. No course pitch.
AGENTS.md now — no email needed.