~nodeweekly | Bookmarks (162)

pnpm 9.0: The Efficiency-Focused Package Manager — pnpm has long been a fantastic option for folks looking to save disk space and CPU cycles (or for its great monorepo support) while maintaining most of what makes npm great. v9.0 drops Node 16 and 17 compatibility, honors the packageManager field in package.json, makes some default config changes, and adopts Lockfile v9.

Learn OAuth 2.0 by Building Your Own OAuth Client — When the author was first learning OAuth, he found lots of concept heavy, code-light tutorials, so he’s built something that’s truly code-first. This is a fantastic way to show off some code (using Annotate) and worth a look even if the topic doesn’t interest you.

Building an npm Package Compatible with ESM and CJS in 2024 — Publishing packages compatible with both ECMAScript Modules (ESM) and CommonJS (CJS) is a valuable skill and Liran has a few quick tips.

node-pg-migrate 7.0: Database Migration Management for Postgres — Lots of cleanups and refactoring from the project’s new maintainer, Shinigami, also a core maintainer of FakerJS and Vite.

Hexo 7.2: Node.js-Powered SSG-Style Blog Framework — If you want to create a blog, write GitHub-Flavored Markdown, and have Node put it all together as a static site, this is for you (it’s a bit like Jekyll but using Node). The 7.2 release isn’t a big one feature-wise, but we haven’t covered Hexo for years :-)

▶  A Node.js Streams Masterclass — What a treat! Join the creator of Fastify, as well as Node.js TSC member, on an hour long odyssey into the world of streams, a topic in which he specializes. He starts off quite poetically .. a stream is like an array over time .. before quickly getting on to some live coding and demos. This is one in...

The Perf Gains of Adding a Task Runner to Node.js — Instead of running npm run test, how does node --run test sound? First teased in a 2023 pull request, the motivation for this idea is to improve performance and get scripts running ASAP (think 20ms vs 200ms). It appears set to make it to a Current Node.js release very soon.

Fullstack & Backend Learning Path — Expand your abilities with our extensive full stack learning path — teaching you how to set up servers, create APIs, and deploy your code to the world. You'll learn VIM fundamentals, API design in Node.js, containers, DevOps, and much more.

MikroORM 6.2: Say Hello to SQL Server (and libSQL) — MikroORM is a popular TypeScript-based ORM based on Data Mapper, Unit of Work and Identity Map patterns, and now it supports Microsoft SQL Server, as well as offering better type safety for custom types.

Madge 7.0: Create Graphs From Your Module Dependencies — A developer tool for generating a visual graph of your module dependencies, finding circular dependencies, and unearthing other useful info.

Modern Errors 7.0: Handle Errors in a Simple, Stable, Consistent Way — Create error classes, wrap or aggregate errors, or use one of several plugins to do things like print bug reporting info, print stack traces, and more.

Catena: Build Type-Safe APIs on Express — Inspired by tRPC, but you can layer it on top of an existing Express codebase.

A Trip Report from the Latest Node.js Collaboration Summit — Twice a year, Node's collaborators and community members meet at collaboration summits to share knowledge, discuss problems, and flesh out new ideas. The last one took place in London earlier this month and featured discussion on Node’s HTTP stack, a new node --run feature, ES modules support, package management, and more. A good update!

Profiling Node Performance with Chrome's Performance Panel — Learn how to profile Node.js performance with the Performance panel in Chrome. (Note that the JS Profiler is going away as of Chrome 124, so if you’re still using it, you’ll want to be familiar with the newer approach shown here.)

Optimize Database Performance with Crunchy Bridge — Boost your Postgres performance with Crunchy Bridge! YNAB experienced 30% more IOPS and a 10% cost reduction. Scale seamlessly, stay on vanilla Postgres, and optimize spend. Read more in the YNAB case study.

An Introduction to the Node.js Performance API — The perf_hooks module provides a subset of the W3C Web Performance APIs and additional APIs for Node-specific perf measurements. This guide shows how to use several of its features.

Building a CLI from Scratch with TypeScript and oclif — oclif is a mature CLI tool development framework maintained by Salesforce. This tutorial goes from zero to something that works.

The April 10 Node.js Security Releases — Another week, another set of security releases, made up of v18.20.2 (LTS), v20.12.2 (LTS), and v21.7.3 (Current). The main issue relates to a command injection vulnerability on Windows.

State Machines Simplified — Discover the simplicity and durability of Temporal, your solution to complex state machine challenges. Unlock efficiency now!

Bun 1.1 Released with Windows Support — With the codename Bundows, the popular alternative JS runtime can now run directly on Windows 10+ (plus WSL, macOS and Linux, etc). This is a key step in Bun's broader adoption vs Node, and even features like Bun Shell work on Windows. Node compatibility continues to improve too with support for node:http2 and IPC support between Bun...

📊 Counterscale: Scalable Web Analytics You Can Run on Cloudflare — A simple web analytics tracker and dashboard that’s designed to be easy to deploy and maintain by hosting it on Cloudflare (for free too, up to a certain level).

Flyweight: An ORM Specifically for SQLite — Some interesting ideas here, a little different to your typical ORM.

JS-Torch: A PyTorch-Like Library for JavaScript — Python’s PyTorch is one of the gold standards amongst machine learning libraries, but this project brings some of its features directly into the JavaScript world. Early days but this could become a big deal for ML in JS?

How to Implement Rate Limiting in Express.js — A practical walk through a simple setup. A viable option against certain bots and users, though not a universal solution for DDoS or determined attackers.