Issue 630 - Node.js 26.4 lands package maps by ~nodeweekly

GitHub - tuananh/camaro: camaro is a Node.js library that transform XML to JSON, using Node.js binding to native XML parser pugixml, one of the fastest XML parser around.

https://github.com/tuananh/camaro

Camaro 6.5: A High Performance XML to JSON Converter — Uses bindings to pugixml, a fast C++ XML parser.

about 2 months ago

Node.js — Node.js 26.4.0 (Current)

https://nodejs.org/en/blog/release/v26.4.0

Node.js 26.4 Adds Package Maps — A minor release whose headline feature is the (experimental) implementation of package maps (which let Node resolve packages from a static JSON file rather than walking node_modules). Matteo Collina’s node:vfs subsystem also begins to make an appearance.

about 2 months ago

Blocking Install Scripts Is Not a Silver Bullet

https://nodesource.com/blog/npm-v12-install-scripts-not-a-silver-bullet

Blocking Install Scripts is Not a Silver Bullet — npm v12 won't run install scripts by default, but Ulises argues that only removes one attack trigger, not a capability, since a compromised dependency’s code still runs on import! He shows why, even then, Node's permissions model and sandboxing are the layers that actually limit what that code can do.

#node.js #npm #nodejs #node #support #training

about 2 months ago

What If npm Ran on AT Protocol?

https://www.jasnell.me/posts/what-if-npm-ran-on-atproto

What If npm Ran on AT Protocol? — James, a long-standing Node core contributor, ponders what a package system built atop the protocol Bluesky uses could look like: “It’s just an idea I couldn’t get out of my head until I wrote it down.”

about 2 months ago

Choose your fighter: benchmarking 5 WebSocket servers for Node.js—Martian Chronicles, Evil Martians’ team blog

https://evilmartians.com/chronicles/choose-your-fighter-benchmarking-5-websocket-servers-for-nodejs

Benchmarking 5 WebSocket Servers for Node.js — A banned IP, a lying load generator, and a 20× latency illusion turned a routine benchmark run into quite the detective story.

#websocket #node.js #frontend & real-time #performance & scale #open source #real-time

about 2 months ago

Introducing eve

https://vercel.com/blog/introducing-eve

🤖 Eve: A Next.js-Style Framework for Building Agents — A new framework from Vercel that provides Next.js-esque structure for building AI-powered agents using TypeScript and Markdown. It's quite Vercel-flavored by default, but I found you can run it entirely independently of Vercel with a few settings tweaks and your own keys. Project homepage.

about 2 months ago

Announcing TypeScript 7.0 RC - TypeScript

https://devblogs.microsoft.com/typescript/announcing-typescript-7-0-rc/

TypeScript 7.0 Release Candidate — A step closer for the Go-powered TypeScript compiler that promises ~10x faster build performance. A reminder that moduleResolution: node / node10 are no longer supported and @types packages you need have to be listed explicitly.

about 2 months ago

AccessControl

https://onury.io/accesscontrol/

🔐 AccessControl 3.0: Role and Attribute-based Access Control — A role and attribute-based (RBAC/ABAC) access control library that, as of v3, now has a real policy engine available to apply conditions to grants, enforced ownership, mandatory restriction gates, audit hooks, and more. GitHub repo.

about 2 months ago

Try Tiger Cloud Free: $1,000 Credit | Tiger Data

https://www.tigerdata.com/go/trial

Stale API Responses Start with a Stale Data Source — TimescaleDB extends Postgres for analytics on live data. No pipeline, no second database. $1000 credit to start.

3 months ago