Public list by ~nodeweekly

Issue 636 - Node.js 26.7, vlt 1.0, and Shai-Hulud Returns

How Etsy's Engineers Keep Their App Crash-Free During Traffic Spikes

https://sentry.io/resources/etsy-workshop/

Join Sentry Live: How Etsy Stays Crash-Free — Sentry and Etsy break down how Etsy's engineering team preps for peak traffic, debugs in real time, and ties crashes to revenue impact. Real stories and practical takeaways for teams running services at scale.

13 days ago

Major Shai Hulud campaign strikes npm again, affecting keyv and 400+ packages - JFrog Security Research

https://research.jfrog.com/post/shai-hulud-is-back-august/

🚨 Shai-Hulud Strikes Again, Affecting keyv and 400+ Packages — A credential-stealing worm was rolled out as part of a false keyv 6.0 release this week, and quickly spread. A reminder to check out npm v12, pnpm, or vlt (below), all of which block install scripts by default, the mechanism this worm relied on.

13 days ago

vlt 1.0 & Hosted Package Registries | vlt /vĹŤlt/

https://www.vlt.io/blog/1-0

vlt 1.0: An npm Alternative With CSS-Like Selectors — After two years, Darcy Clarke's drop-in npm alternative hits 1.0. A key draw is vlt query, which lets you use 60+ CSS-like selectors over your dependency graph (half of which are security related). vlt also offers hosted private package registries.

#announcement #registry #client

13 days ago

anydoc by Firecrawl

https://firecrawl.github.io/anydoc/

anydoc: Convert 14 Document Formats into Markdown — A Rust-powered library (with Node.js and WASM bindings) that converts Word, PowerPoint, Excel, OpenDocument, RTF, EPUB, CSV, and PDF documents into Markdown. I tried it on a 1,600 page PDF and it took less than 2 seconds. There's also an in-browser demo to try it out. GitHub repo.

13 days ago

Node.js — Node.js 26.7.0 (Current)

https://nodejs.org/en/blog/release/v26.7.0

Node.js 26.7.0 (Current) Released — Landing just two days after 26.6, coverage reports can now include files your tests didn't touch with --test-coverage-include-all, FFI and SQLite pick up crash fixes, and Perfetto tracing support lands, though you'll need a custom build to use it.

13 days ago

Try Tiger Cloud Free: $1,000 Credit | Tiger Data

https://www.tigerdata.com/go/trial

Stale API Responses Start with a Stale Data Source — TimescaleDB extends Postgres for analytics on live data. No pipeline, no second database. $1000 credit to start.

3 months ago