Framework
Deno is an open-source JavaScript/TypeScript runtime built on V8, with a secure-by-default model, built-in toolchain, and CLI.
Cloudflare is acquiring the Deno team, with one year of bug and security fixes committed for the runtime. Anyone building on Deno now has to choose between migrating and backing a community fork.
Reality
Deno 2.9, released June 25, 2026, added an experimental deno desktop command that compiles a web app into a single binary. The default backend bundles no browser engine, so rendering follows WebView2 or WebKit. Bundling Chromium is a flag away, at tens of megabytes.
Reality
Deno 2.9.7's `deno audit --fix` left deno.lock byte-for-byte identical on a vulnerable semver, a dev.to author reported. The post says --ignore and --frozen-lockfile did the same, so CI needs its own check that a fix happened.
Reality
Deno's entire team is joining Cloudflare and taking celld, its open-source implementation of Workers and Durable Objects, along with it. For teams on Workers, the code they would use to leave now comes from the company they would be leaving.
Perspective Coverage
7 publishersReality
Deno Deploy shuts down around April 2027 under Ryan Dahl's plan to move the whole Deno team to Cloudflare, a dev.to migration guide reports. Hosted apps must move by then; teams self-hosting Deno get a longer deadline set by the end of security releases.
Reality
Googlebot got 0 characters inside a client-rendered blog's root div, its developer found after Google crawled 270 of the posts and indexed none. A bot-only branch in an existing Netlify edge function now hands crawlers the rendered article and JSON-LD.
Reality
Deno 2.6 added --min-dep-age to keep freshly published npm versions out of installs. Testing on 2.9.6 found that any duration carrying a month or year component drops the check entirely, with exit code 0 and an empty stderr.
Reality
SWC's creator fanned a single instruction out to 45 concurrent Labor0 tasks on the ES minifier, then kept review and merge for himself. He says he does not know how long the run took; he was looking at his phone.
Reality
Linking generated Swift against a reimplemented framework buys a local browser preview and an Android build from one source, which leaves Dactyl owning parity with frameworks it does not control. Agents do that work now.
Reality
Only the per-invoice UPO receipt evidences that an invoice reached the system. Integrations that store a session reference and call it delivered are filing invoices they cannot later prove.
Reality
Sophos says a June 2026 campaign used winget to install the Deno runtime on victim machines, then used deno.exe to fetch, run and persist remote JavaScript ending in a Python infostealer.
Reality
Attackers installed a legitimate JavaScript and TypeScript runtime on victim hosts to run payloads in memory. The middle of the chain barely varied, which is where detection work belongs.
Reality