~nodeweekly | Issue 576 - Koa 3.0, Node 22.15.0, and a V8 boost (7)

The Node.js Test CI Security Incident Explained — The Node.js project recently experienced a critical security incident with its test CI infrastructure. Attackers exploited a flaw in the Jenkins pipeline and this post goes into detail about how it came about and was resolved.

Koa 3.0: The Expressive HTTP Middleware Framework — Koa first appeared over a decade ago as a ‘next-generation’ Web framework that shared some of the lineage (and team) of Express.js, but leaning on more modern JavaScript features and ideas of the time. While Express has been making a comeback recently, Koa has progressed too and offers a compelling alternative. v3.0 release notes.

Node v22.15.0 (LTS) Released — With over 300 commits, this is a meaty update for the most up to date LTS release of Node, though with no huge features. You can now use system certificates on Windows and macOS, numerous dependencies are updated, doc tweaks, and process.execve makes an appearance.

Scala.js 1.19.0: Bringing Scala and JavaScript Together — Scala is a powerful language that has grown beyond its JVM roots to also have JavaScript and native runtimes. Scala.js is a Scala to JS compiler and the homepage has some neat code and feature comparisons.

Giving V8 a Heads-Up: Faster Startup with Explicit Compile Hints — Not Node specific but a look at a V8 optimization that may become relevant in time. Explicit Compile Hints let you direct V8 to eagerly compile specific files as a way to speed up startup. It ships with Chrome 136.

Seyfert: A Framework for Building Discord Bots — Create bots for the popular chat system starting from bots that respond to simple commands up to creating components and getting user input. Started life being Node only but recent versions support Deno and Bun too. GitHub repo.

Bi-Weekly Demo: Find & Fix Errors in Your Application — In this fast-paced 25-min demo, see how Sentry (and Codecov) help you catch Node errors, spot slowdowns, and ship cleaner code—without getting buried in logs. Hosted biweekly by a real human who’s broken plenty of apps, too. 👉 Save your spot.