deno tooling performance security typescript

Deno 2.6 ships dx, granular perms, tsgo

dx replaces npx with Deno's permission model; tsgo type-checker (experimental) delivers 2x speed gains; deno audit scans JSR/npm for CVEs.

June 11, 2026

Summary

Faster type-checking reduces iteration friction in large projects. dx + granular permission flags (--ignore-read, --ignore-env) let you run untrusted dependencies without full sandbox surrender. deno audit closes the gap on Node.js security tooling.

Why it matters

Implementation verdict

dx is production-ready (replaces npx workflow). tsgo requires --unstable-tsgo flag; benchmark it on your codebase before committing. deno audit is stable. Permission broker is experimental. Worth adopting dx immediately; test tsgo if type-checking is a bottleneck.

Sources

1.dx defaults to --allow-all permissions, unless another permission flag is passed
2.We've seen 2x speed improvements in type checking times for internal projects when using TSGO
3.deno audit subcommand, which helps you identify security vulnerabilities in your dependencies by checking GitHub CVE database
4.dx prompts you before downloading a package

Dev Signal

Get briefs like this in your inbox — free, 3x a week.

100+ sources compressed into one 4-minute read. Ranked, cited, implementation-ready.

Read the full issue →All briefs