Bookmarks (136)

An Enhanced 2FA Experience for Your npm Account — Over the past six months, GitHub has been keen to tighten up security around the publishing of npm packages with two-factor authentication at the heart of the effort. Now an array of improved 2FA features are in public beta for you to try out, but all maintainers of the top 500 npm packages will be...

Couchbase Capella DBaaS: Store in JSON, access with SQL — Build faster with in-memory performance, automatic replication and scaling. Try it now for free and be live in under 3 minutes.

Ryan Dahl on JavaScript Containers — Ryan, originally known for Node and now Deno, thinks about JavaScript as being a universal scripting language and how the JS sandbox acts as a sort of high level version of the traditional Linux container and will only become more important in the next few years.

Mystery of Industry-Focused Backdoored npm Packages Solved — Snyk, JFrog and ReversingLabs spent a fair bit of time investigating modules that were built by an intern at a security research company researching dependency confusion.

What's Involved in Running a Ransomware Attack in a Node Module — What began as a learning experiment to see how difficult it would be turned into concern at how easy it was..

GraphQL Yoga 2.0: A Light But Fully-Featured GraphQL Server — Bills itself as the ‘easiest way to run a GraphQL server’. Yoga follows the GraphQL over HTTP spec, supports file uploaded, subscriptions over HTTP Server Sent Events, and more – plus it’ll work on Node, Deno, or even serverlessly. GitHub repo.

URL State Machine: A Fast Spec-Compliant URL State Machine — Aims to follow the WhatWG spec on the matter.

Agenda 4.3: Lightweight Job Scheduling for Node — Uses a MongoDB-backed persistence layer and offers rate limiting, pause/resume, and repeatable jobs.

nve 15.0: Run Things With a Specific Node.js Version — Easily execute a file, command, or REPL using a specific version (or multiple versions) of Node. For example, you could run npm test over multiple versions at once.

resvg-js 2.0: A High-Performance SVG Renderer and Toolkit — Powered by Rust’s resvg on the backend, this works in both Node and the browser (via WebAssembly, though) for converting SVG to PNG with a high level of SVG spec support.

Node v18.1.0 (Current) Released — There’s an initial version of a CLI based test runner (which you start with node --test – see docs here) and there have also been further developments on implementing the WebAssembly Web API.

JSPyBridge 1.0: A Bridge Between Node and Python — A work in progress but offers the ability to go either way - run Python from Node, or run Node from Python ‘with a native feel.’ “Unlike other bridges, you may notice you’re not just writing Python code in JavaScript, or vice-versa. You can operate on objects on the other side of the bridge as...

The Thing About Fastify — Express isn’t the only game in town but sometimes it feels like it, so Jonas has written a love letter, of sorts, to Fastify, an alternative Node.js Web framework that ticks his boxes and which you, too, should consider, if you haven't already.

AppSignal Logbook: Team Discussion and Full Incident History — With Logbook you get the full incident history. Read and leave team comments, see which notifications were sent at what time, and see team activity for changes in incident states. It's easier than ever to see what the current state of an incident is.

Prisma Raises $40M for 'Open Source Platform for Database Languages' — This is a mainstream media writeup rather than something technical, but you probably know of Prisma for its popular and eponymous Node.js ORM. It seems like they have big plans!

Creating and Deploying a Tiny Proxy Server on Vercel in 10 Minutes — A neat use of a small Node powered proxy.

'Lerna Has Gone. Which Monorepo Is Right with Node Now?' — An overview of modern monorepo tooling for backend work with Node.js.

Building a JavaScript Bundler from Scratch — After building a to-do list, a static site generator, or even a testing framework, how about a bundler? Christoph, well known for his work on Jest and Yarn, covers it all here, and there's a livestream version too.

NodeBB 2.0 Released: Node-Powered Forum Software — A very long standing Node-based forum system that supports multiple data stores, real-time notificatins, has a RESTful API, and more. If you’re an existing NodeBB user, there’s a migration guide. GitHub repo.

pdfreader 2.0: Parse Text and Tables From PDF Files — Read text and parse tables from PDF files. Supports tabular data with automatic column detection, and rule-based parsing.