JavaScript

TypeScript passed both Python and JavaScript among GitHub’s 180M+ developers in August 2025, capping a coverage shift from JavaScript’s usage leadership to AI tooling and ecosystem security.

Who they are

JavaScript appears in coverage as the web’s core programming language and a broadly deployed application runtime, spanning browser behavior, npm packages, developer rankings and AI coding tools. Its stories connect it to GitHub and rival languages including Python, Java and TypeScript, as well as platform companies such as Google, Anthropic and OpenAI.

The recent arc

Recent coverage peaked in 2024Q4 and moved decisively beyond language-popularity stories. GitHub reported in October 2024 that Python had overtaken JavaScript as its most popular language amid growth in generative-AI projects; in October 2025, GitHub said TypeScript had passed both Python and JavaScript. That sequence contrasts with earlier coverage in which JavaScript led GitHub and developer-survey rankings.

The other major recent thread is JavaScript as both an AI execution environment and an ecosystem risk. Anthropic launched Claude capabilities to write and run JavaScript for file analysis and to generate interactive apps through Claude Artifacts, while xAI’s Grok Studio also ran JavaScript. At the same time, the polyfill.io compromise was reported as affecting more than 100,000 websites, and a phishing-led compromise enabled malware injections into 18 npm packages with 2.6B+ combined weekly downloads.

The tension

Coverage centers on a dual tension: JavaScript remains indispensable enough to be embedded in browser, package and AI-product workflows, but its perceived leadership is being challenged by Python’s AI-era momentum and TypeScript’s ascent on GitHub. The same ubiquity magnifies security exposure, from TikTok’s reported in-app-browser tracking code and YouTube’s Coinhive ad incident to compromised JavaScript supply-chain services and npm packages.

Why it matters

If this trajectory holds, JavaScript’s importance may increasingly be measured less by top-line language rankings than by its role as the deployable layer for AI-generated interfaces and code execution. TypeScript’s rise could reshape developer preferences around the JavaScript ecosystem, while recurring package and third-party-script incidents make provenance, maintainer security and dependency control consequential for a vast installed base; whether these pressures reduce JavaScript use or harden its ecosystem remains unresolved in the coverage.

Related: GitHub · Python · TypeScript · Google · Aikido Security says attackers injected malware into 18 npm packages w · Report: TikTok's in-app browser injects JavaScript that can track user