Tales from the Void: April 2026 Recap

Welcome to another edition of Tales from the Void!

Regularly, we recap the project updates for Void, Vite+, Vite, Vitest, Rolldown, Oxc, and what’s happening in our community.

Security at VoidZero ​

Popular open source projects are increasingly at risk of supply chain attacks because of (1) their widespread distribution and (2) publicly available source code, and VoidZero maintains some of the most widely used.

At this scale, security is a foundational responsibility. To properly secure our packages, we need to acknowledge the current paradigm.

1. AI can discover new vulnerabilities much faster.
2. Security measures are backwards looking.

Meaning our implemented checks prevent known exploits, but do NOT guard against new AI-discovered attack vectors targeting the publish pipeline itself.

Therefore, we always require human approval using trusted publishing. Publishing from local machines is forbidden. This is in addition to the publishing best practices outlined by e18e.

Project Updates ​

Void ​

The first batches of Void platform alpha invites were sent out to our waitlist users, with more invites going out in the coming weeks. Sign up if you haven't already!

Vite+ ​

• Vite+ offers a new lazyPlugin function, allowing you to skip plugins for commands like vp check to avoid unnecessary slowdowns.
• When creating new Vue or Astro projects, Vite+ adds shims by default to improve DX and reduce friction.
• vp check is now cached by default, making subsequent runs much faster if your codebase hasn't changed. As usual, the cache will automatically invalidate when you change your code.
• You can now take a look at all Vite+ core contributors on the team page.

Vite ​

• Module Federation will be delegated to the Vite plugin instead of being built into the Rolldown core because most MF features inevitably live in the JS plugin layer and not the bundler.

Vitest ​

• The Vitest docs have a new learn section that aims to help users get started with writing tests.
• Browser Mode received a new trace viewer that is available in the latest Vitest 5 beta.
• Vitest now has a way to preParse your test specs, allowing you to apply filters without running all tests.

Rolldown ​

• Rolldown can now inline const-based enums.
• To optimize your chunks, you can now use module tags to group them.

Oxc ​

• VoidZero team member Brooklyn built an Oxc-based Angular Compiler with a first-class Vite plugin as a research experiment which performs up to 6.4x faster than the Angular CLI and 20.7x faster than the Webpack-based Angular toolchain.
• Oxc team member Cameron Clark released an RFC for framework support in Oxlint, covering the motivation, design, and implementation of framework-specific linting rules.

Upcoming Events ​

To catch talks and presentations from VoidZero team members, see the following events where they will present:

• Laravel Live Japan 2026 will feature a talk from Alexander Lichter and a panel with sapphi-red on May 27th.
• Alexander Lichter will join enterJS 2026 in Mannheim, Germany on June 16th.

From The Community ​

• Railway moved their front end to Vite and TanStack, reducing their build time from >10m to <2m.
• Wes and Scott from Syntax mentioned Oxlint as an important tool to fix vibe coding.
• Irfan wrote about how his team migrated more than 6,000 TypeScript files from ESLint to Oxlint and why.
• npmx added a vp option to their website, allowing users to copy Vite+ commands directly from the UI.
• Netlify's build system migrated to Oxfmt under the hood, replacing Prettier for formatting their codebase.
• Renovate made the full switch to Oxlint after previously using ESLint and Oxlint in tandem.
• The Fallow team is working on Oxc-based code coverage instruments, aiming for a 5-33x speedup over existing tools.