~nodeweekly | Issue 555 - Node v23.2 released (13)

Node v23.2.0 (Current) Released — On paper, a relatively minor release that updates the root certificates, adding five new ones, but development of TypeScript support has now moved into active development (as opposed to ‘early development’) and there’s a new module.stripTypeScriptTypes API.

Introducing the vlt Package Manager — Made up of an incredibly experienced team, including npm’s creator Isaac Schlueter, Vlt set out to ‘build the future’ of JS package management. The vlt tool, explained here, is the first fruit of the project and acts as ‘a drop-in replacement’ to whatever you’re using now.

Key Learnings From the State of DevSecOps Study — To understand the state of DevSecOps adoption in 2024, Datadog evaluated real-world data from thousands of applications. Read the report for key insights on secure application development techniques to improve your security posture.

Node.js v22 Enters Long Term Support (LTS) — This happened in the past couple of weeks, but Lizz has put together a useful update on Node 22’s recent transition to becoming an LTS release and the key features it has baked in.

JavaScript Import Attributes (ES2025) Explained — Import Attributes (currently stage 3 at TC39 but supported in Node) add a way to supply useful metadata about modules you’re importing.

Node Implementing Stricter Policies for Pull Requests — To help bolster the stability and security of major releases, the Node team has introduced a stricter policy around semver-major PRs. If such a PR lands on the default branch within a month prior to a major release, it’ll be far less likely to make it in.

🎵 music-metadata: Stream and File-Based Music Metadata Parser — Supporting formats like MP3, FLAC, Ogg, WAV, WMA, AAC and AIFF, this library extracts metadata like ID3v1 and iTunes tags for processing however you want. Supports streaming and has an async API for efficiency.

Immutable.js 5.0: Immutable Collections for JavaScript — Provides numerous persistent immutable data structures including a list, stack, map, ordered map, set, ordered set, and records.

Automate Embedding Creation and Syncing in Postgres with pgai Vectorizer — 🚀 pgai Vectorizer automates embedding creation and syncing in Postgres with one SQL command — keeps embeddings updated, no tools needed.

Cron 3.2: Cron-Syntax Job Runner for Node — Execute functions whenever your scheduled jobs (defined using standard cron format) triggers.

WebAssembly Audio Decoders — Targeting both browser and Node.js use cases, this is a collection of WASM-powered audio decoding libraries for formats like MPEG I/II/III, FLAC, Ogg Opus, Ogg FLAC, Opus, and Ogg Vorbis.

graphql-subscriptions: GraphQL Subscriptions for Node.js — Wire up GraphQL with a pub/sub system (e.g. Redis) to implement subscriptions in GraphQL.