~nodeweekly | Bookmarks (173)

A Trip Report from the Latest Node.js Collaboration Summit — Twice a year, Node's collaborators and community members meet at collaboration summits to share knowledge, discuss problems, and flesh out new ideas. The last one took place in London earlier this month and featured discussion on Node’s HTTP stack, a new node --run feature, ES modules support, package management, and more. A good update!

The April 10 Node.js Security Releases — Another week, another set of security releases, made up of v18.20.2 (LTS), v20.12.2 (LTS), and v21.7.3 (Current). The main issue relates to a command injection vulnerability on Windows.

Building a CLI from Scratch with TypeScript and oclif — oclif is a mature CLI tool development framework maintained by Salesforce. This tutorial goes from zero to something that works.

An Introduction to the Node.js Performance API — The perf_hooks module provides a subset of the W3C Web Performance APIs and additional APIs for Node-specific perf measurements. This guide shows how to use several of its features.

Profiling Node Performance with Chrome's Performance Panel — Learn how to profile Node.js performance with the Performance panel in Chrome. (Note that the JS Profiler is going away as of Chrome 124, so if you’re still using it, you’ll want to be familiar with the newer approach shown here.)

State Machines Simplified — Discover the simplicity and durability of Temporal, your solution to complex state machine challenges. Unlock efficiency now!

Migrating 500+ Tests from Mocha to Node.js — A quick retrospective of how the Astro team migrated more than 500 test suites from Mocha to the Node.js test runner.

How to Implement Rate Limiting in Express.js — A practical walk through a simple setup. A viable option against certain bots and users, though not a universal solution for DDoS or determined attackers.

JS-Torch: A PyTorch-Like Library for JavaScript — Python’s PyTorch is one of the gold standards amongst machine learning libraries, but this project brings some of its features directly into the JavaScript world. Early days but this could become a big deal for ML in JS?

Flyweight: An ORM Specifically for SQLite — Some interesting ideas here, a little different to your typical ORM.

📊 Counterscale: Scalable Web Analytics You Can Run on Cloudflare — A simple web analytics tracker and dashboard that’s designed to be easy to deploy and maintain by hosting it on Cloudflare (for free too, up to a certain level).

Janeway: A Node Console REPL with Object Inspection — Has some neat features including being able to look into buffers with a built-in hex viewer.

Versioning Workflows with TypeScript — Learn when and how to apply versioning, then practice using our TypeScript SDK in this free, hands-on training course.

zx v8.0: Google's Way to Write Shell Scripts with Node — A long-standing way to make scripting a more pleasant experience. zx provides useful wrappers around child_process, escapes arguments and gives sensible defaults. v8.0 somehow makes zx 20x smaller, faster, makes it easier to kill processes, pass input to commands, and more. A substantial release.

Build a RAG Chatbot App with MongoDB and Node.js — Embark on the RAG to Riches Developer Quest — a month of innovation, learning, and exclusive rewards awaits you. You’ll interact with AI-enhanced bots and learn how to build your own with Atlas Vector Search and Node.js. Register now!

The April 3 Node.js Security Releases — Includes v18.20.1 (LTS), v20.12.1 (LTS) and v21.7.2 (Current), each rolling out fixes to llhttp and Undici to tackle two HTTP related vulnerabilities.

Bun 1.1 Released with Windows Support — With the codename Bundows, the popular alternative JS runtime can now run directly on Windows 10+ (plus WSL, macOS and Linux, etc). This is a key step in Bun's broader adoption vs Node, and even features like Bun Shell work on Windows. Node compatibility continues to improve too with support for node:http2 and IPC support between Bun...

Node.js Debugging in Chrome DevTools — If Chris didn’t know how to do it, I’m going to predict many readers don’t either, so his simple example of setting it up might be helpful :-)

Diving into the Node.js Website Redesign — Yes, Node’s official homepage has an all new, clean, modern design. We like it! Front end engineer Brian Muenzenmeyer gives us a bit of a peek into what went into the rebuild, which has been a long time in the making.

Node SQL Parser 5.0: Parse Simple SQL into ASTs — And vice versa (turn ASTs, that you can manipulate, back into SQL).

Slonik v38: The Sophisticated Postgres Client Library — A ‘battle tested’ framework that offers strict types, detailed logging, abstracts repeating code patterns, protects against unsafe behavior, and provides a rich debugging experience.

Optimizing JavaScript for Fun and for Profit — A tour of several things to avoid to keep your code fast, complete with examples. While the performance ground upon which we walk is always shifting, these are mostly common sense ideas.

__dirname is Back in Node with ES Modules — In an ES module, instead of using __dirname or __filename, you can now use import.meta.dirname and import.meta.filename (this came with Node 20.11.0 (LTS) released in January).

▶  Node.js: The Documentary (An Origin Story) — Late last year, Honeypot released a Ruby on Rails documentary – now they’re back tackling Node. It’s an hour long, but covers the early history of Node particularly well. If you weren’t deep into the Node world in 2009-2015, this is is a fantastic way to get up to speed and flows really well.