~nodeweekly | Bookmarks (141)

Express 5.1: Express 5 Finally Becomes the 'Latest' Release — After a period of some dormancy, Express 5.0 was released last year, but remained a somewhat experimental ‘edge’ release as it went through a security audit and process of building up new governance. With 5.1, however, Express 5.x finally becomes the ‘latest’ tagged release on npm, so be careful with those upgrades (luckily there’s...

Neutralinojs 6.0: Alternative Cross-Platform Desktop App Approach — Neutralinojs offers an interesting lightweight alternative to something like Electron, as it still lets you build apps that run on Linux, Windows and macOS, but Chromium isn’t bundled – instead the existing installed browser engine is used.

Playwright MCP: Connect LLMs to Browsers with Playwright — MCP (Model Context Protocol) servers enable certain LLM-based agents (such as Claude Desktop, Claude Code, and Cursor) to perform actions on systems outside of their usual sandbox. This new project from Microsoft enables such LLMs to interact with Web pages via Playwright.

Nōdo: A Way to Call Node.js from Ruby — A mechanism for letting Ruby scripts make calls to Node.js-based functions via a Unix socket-based IPC approach. (We also learn that “ノード” means “node” in Japanese.)

Teable: Open Source Airtable Alternative atop Postgres — Airtable is a popular data table database SaaS, but here’s a NestJS-powered open-source alternative in a similar manner that sits atop Postgres. GitHub repo.

Land Ahoy: Leaving the Sea of Nodes — A deeply technical post from a core member of the V8 JavaScript engine team that explains the limitations of Turbofan, one of V8’s optimizing compilers. If you don’t care for the internals of how your JavaScript is compiled and run, just be assured the V8 team is working to make it run even faster!

Securing Node.js Express APIs with Clerk and React — Learn to secure Node.js/Express APIs with Clerk & React. Implement JWT authentication, protect routes, manage users, and handle sessions seamlessly. Ideal for scalable full-stack apps.

Node.js TSC Votes to Stop Distributing Corepack — Corepack was introduced as an (experimental) tool bundled with Node to help with managing versions of your package managers. Corepack will live on as a separately installable tool, but will be phased out from future Node releases following a recent TSC vote.

New URLPattern API Brings Improved Pattern Matching to Node — The Cloudflare Workers team has implemented the URLPattern API in the Ada URL parser, used by both Node.js and Cloudflare Workers. The API lets you take patterns like /blog/:year/:month/:slug and test whether URLs match against them. If you’re using Node 23.8+, you can start using it today.

Errsole.js: Collect, Store, and Visualize Node App Logs — Rather than leaning on a third-party service for log monitoring, the idea of Errsole is you just drop its package into your app and you get logging and a basic UI for looking at those logs all ‘out of the box’. It supports numerous storage mechanisms, from SQLite in dev to MySQL, Postgres and MongoDB...

SuperTest 7.1: HTTP Assertions Made Easy — Got an HTTP API to test? SuperTest provides a fluent API for chaining together requests and expectations. See some examples here.

The Ultimate PaaS Pricing Calculator — We wanted a tool to compare prices between Heroku, Render, Fly.io, and more. So we built one.

node-rate-limiter-flexible 6.2: Limit Number of Actions by Key and Protect Apps from Brute Force Attacks — Can use Redis, in-process memory, memcached, MongoDB, Postgres or, newly, SQLite, to count actions in either a single process or distributed environment.

gosync: Go-Style Channels and WaitGroup for Node — Possibly of interest to you if you’re familiar with Go and channels.

How to Get Deep Traces in Your Node Backend with OTel and Deno — The Deno project turns up the heat by demonstrating how to add OpenTelemetry to a Node app before showing how much easier it is with Deno (as long as your Node app runs well under it).

Node v23.10.0 (Current) Released — Node gains a new --experimental-config-file option for writing a JSON-based config file that contains options that would otherwise litter your command line flags – ideal for configuring the test runner, say.

Node.js Gets an Official Community Space on Discord — While there have been numerous IRC channels and Discord and Slack servers where Node developers can congregate, the Nodeiflux Discord server has been promoted to being an official one – here’s the invite link if you’re a Discord user. There are already 15k members, so it’s hopping.

Piscina 4.9: A Fast Worker Thread Pool Implementation — Node’s worker threads bring true multithreading to Node apps and Piscina is a pool for tracking and controlling the number of such threads.

Refractor 5.0: Virtual Syntax Highlighting using Prism — Wraps the powerful Prism syntax highlighter to output objects instead of an HTML string so you can manipulate and render it as you wish (e.g. in a VDOM or at the terminal). Lowlight, by the same author, offers the same functionality but backed by highlight.js.

OTPAuth: One Time Password (HOTP/TOTP) Library — When you log in to a site with 2FA and you’re asked for six digits from your authentication app, that’s a Time-based One-Time Password (or TOTP). This library for Node, Deno, Bun and the browser lets you work with both TOTPs and HOTPs (HMAC-based OTPs) from JavaScript.

🔐 Protect.js: 'Encryption in Use' for Data in Node Apps — Designed to work with any Node framework or ORM, Protect.js provides AES-256 based ‘encryption in use’ functionality. GitHub repo.

Node v20.19.0 (LTS) Released with require(esm) — Node v20 is in maintenance mode, which usually means no new features, but it lands a significant one here: support for require(esm) enabled by default. This means all Node v20+ releases now support loading native ES modules with require out of the box. Ideal if you have dependencies to update and you’re still on v20.

Node Added TypeScript Support, But What Does That Mean for Deno? — The Deno team, learning from previous experiences with Node, went ‘all in’ with TypeScript from day one. Now, Node can work with TypeScript too, but the experience is still very different, and the Deno team explains how here.

🔎 Node Modules Inspector — A tool that runs pnpm inside your browser, “installs” a package, then analyzes its dependencies. This can be useful for analyzing packages you already use, but also for simplifying your own projects, as 11ty’s Zach Leatherman did here.