Bookmarks (136)

A Report From April's Node.js Collaboration Summit — Twice a year, a large group of Node contributors and community members get together to discuss the project, brainstorm ideas, and push forward new initiatives. This time, they talked about the recent CI security incident, Async Context, improving Node’s ability to compile apps into executables, Undici, module loader hooks, and better integration with Chrome’s DevTools.

express-generator-typescript: An Express.js + TypeScript App Generator — Creates the boilerplate for a TypeScript-powered Express.js app. Now uses Express.js 5.

Defuddle: Extract the Main Content from Web Pages — Strips extraneous clutter from HTML in order to leave only the primary content for you to format or use as you wish. Essentially a modern implementation of the ideas behind Mozilla’s Readability. There’s an online demo if you want to give it a try.

Astra: A New JavaScript-to-EXE Compiler for Windows — Boasts “a new approach to compiling” JavaScript applications for a single executable experience on Windows only (for now).

Google Gen AI SDK for TypeScript and JavaScript v1 — Why let Python developers have all the fun? Now you can harness the full power of Google’s Gemini API (and Vertex platform) from Node too. v1.0 landed a few days ago, but today we also get v1.1 which includes CommonJS support. The Gemini docs and examples now use it too (if you select JavaScript).

A Developer’s Guide to Migrating from API Keys to OAuth 2.1 — Many still rely on API keys for service-to-service auth. But with MCP making OAuth 2.1 mandatory, it’s no longer just a “nice-to-have.” Here's what’s changing and what it means for your architecture.

Six Ways Slack, Notion, and VS Code Improved Electron App Performance — An experienced Electron app developer shares a guide to Electron performance optimization and how to get the most out of your apps.

⚡ Announcing TypeScript Native Previews — Earlier this year, Anders Hejlsberg teased a 10x faster TypeScript through efforts being made to port the TypeScript compiler to Go, enabling it to be compiled and run natively, as well as take advantage of more concurrency. You can now try it for yourself.

Node.js TSC Declines to Endorse Feature Bounty Program — There was recently a debate around whether the Node.js project should establish a formal feature bounty program to enable end users to offer monetary rewards for specific features. This post summarizes why the official response is no, for now.

CodeRabbit’s Free AI Code Reviews in IDE - VS Code, Cursor, Windsurf — Code Rabbit brings AI code reviews to VS Code, Cursor & Windsurf. Get line-by-line reviews, one-click fixes & codebase-aware feedback - all free in your IDE. Seamlessly integrates with git workflows. Install the extension & start reviewing!

Node v24.0.1 (Current) Released — Node 24.0 was released last week, but now we have a patch release to reintroduce the long-deprecated SlowBuffer which was removed in Node 24. Why? There are still popular packages using it.

Glob 11: Match Files Using Shell-Style Patterns — “The most correct and second fastest glob implementation in JavaScript.”

jsdiff 8.0: A JavaScript Text Diffing Implementation — Can compare strings for differences in various ways including creating patches. There’s an online demo.

Hyparquet: Parquet File Parser for JavaScript — Parquet is a popular column-oriented data file format frequently used for storing large datasets for analysis. Hyparquet is a dependency-free JavaScript library for working with Parquet files, even in the browser (as in this demo).

ANSIS 4.0: ANSI Color Library for Everywhere — A ESM and CommonJS library to use the power of ANSI escape sequences for coloring and styling text in numerous environments including the terminal, Chromium-based browsers, Node, Bun, Deno, and even Next.js. v4.0 is a big upgrade with enough breaking changes to warrant a migration guide for existing users.

PptxGenJS: Build PowerPoint Presentations with JavaScript — A mature library that outputs standards-compliant Open Office XML files compatible with PowerPoint, Apple Keynote, and other common presentation tools. Supports graphics, text, tables, and other typical slide objects. Demos.

Common Downtime Causes (With Real Node.js Examples) — Bad deploys, traffic spikes, dependency fails—our guide shows how to spot downtime early with real-world Node.js examples and smarter monitoring.

Best Practices for Creating a Modern npm Package — A step-by-step “as of 2025” walkthrough of creating your own npm package using current best practices. We’ve linked to this before but it’s just been updated.

Feedsmith: A Fresh New Web Feed Parser and Generator — The creator of Feedsmith ran into numerous problems with existing libraries, so created this new, modern way to both parse and generate RSS, Atom, JSON Feed, OPML, and RDF feeds with support for common namespaces as used in podcast, media, and other niche types of feed. It’s still early days but the essentials are there.

Retrieval-Augmented Generation (RAG) with Llama Stack and Node — Meta’s Llama Stack is a unified set of APIs for working with numerous parts of the modern LLM-powered stack, including RAG, as demonstrated here.

Node 24 (Current) Released — Node’s release lines are in flux – v18 has just gone EOL and now v23 bows out to let v24 be the ‘Current’ release for when you want all the cutting edge features. It comes with npm 11, V8 13.6 (hello RegExp.escape, Float16Array, Error.isError and more), the URLPattern API exposed as a default object, and Undici 7.

Take the Latest Node.js Next 10 Survey — The Node.js core team and the Linux Foundation are keen for you to take part in the latest Node.js Next 10 Survey. ‘Next 10’ is a term the Node team uses to refer to strategizing Node’s direction over the next ten years, and the survey helps them get your input into this.

Converting Values to Strings in JavaScript — When Dr. Axel says “converting values to strings in JavaScript is more complicated than it might seem”, I’m going to believe him. An interesting poke around into something simple that you might not think about very much.

Plug Enterprise SSO to Your Node App in Minutes — Add SAML and OIDC SSO on top of your existing auth using Scalekit’s Node SDK — no rewrites required. Learn more.

Why We Created Another Kafka Client for Node.js — Apache Kafka is a popular distributed event streaming platform but the existing client libraries have various flaws, leading Platformatic to release a new one built around modern Node best practices.

mono-jsx: <html> as a Response — A server-side JSX runtime that renders <html> to a Response with no build step needed and works across numerous server-side JS runtimes.

PGlite 0.3: Postgres but in WebAssembly — A WebAssembly-based build of the Postgres SQL database meaning you can run it wherever WebAssembly can be run (such as in the browser or directly from Node).

Koa 3.0: The Expressive HTTP Middleware Framework — Koa first appeared over a decade ago as a ‘next-generation’ Web framework that shared some of the lineage (and team) of Express.js, but leaning on more modern JavaScript features and ideas of the time. While Express has been making a comeback recently, Koa has progressed too and offers a compelling alternative. v3.0 release notes.

Scala.js 1.19.0: Bringing Scala and JavaScript Together — Scala is a powerful language that has grown beyond its JVM roots to also have JavaScript and native runtimes. Scala.js is a Scala to JS compiler and the homepage has some neat code and feature comparisons.

Seyfert: A Framework for Building Discord Bots — Create bots for the popular chat system starting from bots that respond to simple commands up to creating components and getting user input. Started life being Node only but recent versions support Deno and Bun too. GitHub repo.

Giving V8 a Heads-Up: Faster Startup with Explicit Compile Hints — Not Node specific but a look at a V8 optimization that may become relevant in time. Explicit Compile Hints let you direct V8 to eagerly compile specific files as a way to speed up startup. It ships with Chrome 136.

The Node.js Test CI Security Incident Explained — The Node.js project recently experienced a critical security incident with its test CI infrastructure. Attackers exploited a flaw in the Jenkins pipeline and this post goes into detail about how it came about and was resolved.

Node v22.15.0 (LTS) Released — With over 300 commits, this is a meaty update for the most up to date LTS release of Node, though with no huge features. You can now use system certificates on Windows and macOS, numerous dependencies are updated, doc tweaks, and process.execve makes an appearance.

Microsoft Warns About Node.js' Role in Modern Malware — Microsoft’s security team is observing a sharp increase in the use of Node.js to deliver malware and other malicious payloads. This post digs into a couple of examples and what's going on behind the scenes.

Repomix: Pack Your Codebase Into AI-Friendly Formats — Enter a GitHub URL and choose various settings for the output (XML, MD, etc). It’s Node.js-based and available to use in a library-like form for your own tooling creations too. GitHub repo.

🤖 node-mlx 0.4: Machine Learning Framework for Node.js — Based upon Apple’s MLX framework targeting Apple’s own chips, node-mlx brings its power into the Node world.

Node v20.19.1 (LTS) Released — You know it’s a quiet week when a .1 release is feature-worthy news. Little here except dependency bumps, though, but it’s always good to see an update of what remains a popular Node version (though Node 22 ‘Jod’ should now be your LTS version of choice, ideally).

Optimizing Node Performance with V8 GC Optimization — Matteo recently ▶️ gave a talk at dotJS about Node’s memory usage and decided to write it up into a blog post too. Matteo notes that high memory usage doesn’t necessarily mean you have a memory leak, explains how V8’s garbage collector works, and how you can tune things specifically for your own use case.

Fastify + React – 7x Faster than Next.js? — Node’s Fastify framework has a mature plugin for Vite integration (explained in detail here), including @fastify/react which just hit version 1.0 and makes it easy to create fast, featureful (though obviously less so than Next.js) React apps atop Fastify. How fast? Very, it seems.

Chrono 2.8: A Natural Language Date Parser — Give it a string like “today”, “last Friday”, “2 weeks from now”, or even an entire date and time, and it’ll come up with a date object to suit.

Prisma ORM 6.6.0 Released — Introduces a new prisma-client generator that’s more flexible and comes with ESM support, plus a preview of an MCP server to let AI agents and tools manage Postgres.

Lexe: Package a Node App into a Single Executable — Node actually has a mechanism for creating single executable applications and there are numerous other tools to do it, but Lexe takes the approach of using Amazon’s lightweight LLRT engine to make binaries of under 10MB in size. Note, however, "Lexe is not a drop-in replacement for Node.js. It only supports a subset of Node.js APIs."

Some Features Every JavaScript Developer Should Know in 2025 — A quick list post breezing through a few more modern areas of JavaScript including iterator helpers, structuredClone(), and set operations.

Comparing Tauri and Electron for Building Desktop Apps — Electron is a natural choice for building JS and HTML-powered cross-platform desktop apps but numerous alternatives have appeared like Neutralinojs and the Rust-based Tauri. This post does a good job of quickly showing how Tauri differs and why you might choose it.

Bi-Weekly Demo: Find & Fix Errors in Your Application — In this fast-paced 25-min demo, see how Sentry (and Codecov) help you catch Node errors, spot slowdowns, and ship cleaner code—without getting buried in logs. Hosted biweekly by a real human who’s broken plenty of apps, too. 👉 Save your spot.

Could JavaScript Have Synchronous Await? — Our favorite JavaScript doctor explores the idea of a synchronous await to erase the divide between sync and async code, explains why it’s enticing, and digs into why performance hits and concurrency headaches make it impractical.

Node.js Testing Best Practices — A detailed guide to modern testing in Node from a group of developers who know all about it. It’s on GitHub but is essentially written like a free book covering over 50 battle-tested tips covering areas as diverse as the ‘Testing Diamond’, testing microservices, checking contracts, verifying OpenAPI correctness, and simulating flaky network conditions.

🎵 Communicate with Ableton Live via WebSockets — Ableton Live is a popular DAW (digital audio workstation) and this opens up a way to control it from Node.js code.

A Practical Guide to Llama Stack for Node Developers — Red Hat’s Node team has been digging deep into LLM coding in recent months, and now shares its discoveries in using Meta’s Llama Stack (not to be confused with their Llama LLM) – it’s a unified set of APIs for working with numerous parts of the modern LLM-powered stack including models, evals, RAG, tool...

How the Node Team Makes Node.js Downloads Reliable — I’m sure most of us rely on just clicking and downloading Node.js (or having a package manager or CI process do it) and it Just Works™. Turns out there’s a lot going on behind the scenes to keep Node.js quick and easy to download and this tells the full story of an operation that serves...