Why Drizzle ORM couldn't publish new versions to NPM for a month: www.vlt.io/blog/packume...

Node.js 26.4.0 is out with a new `node:vfs` built-in module (behind `--experimental-vfs` flag). It also adds support for package maps, and many bug fixes, including a fix for a regression shipped with last week security release. Full changelog and download links at nodejs.org/en/blog/rele...

New @nodejs.org 24.18.0 release is now out. nodejs.org/en/blog/rele... This fixes a couple of regressions: - github.com/nodejs/node/... - github.com/nodejs/node/...

📢 CFP EXTENDED: NodeConf EU 2026 — Bologna, Italy We pushed the Call for Papers deadline to **June 30th**. One more week to send your talk. Node.js maintainers, production engineers, runtime nerds, tooling builders => we want your session.

I was curious what the NPM package with the most releases was, and turns out it's 'electron-remote-control' with 37,328 versions. https://www.npmjs.com/package/electron-remote-control

⚠️ Updates are now available for the 26.x, 24.x, 22.x Node.js release lines for the following issues. More information here: https://nodejs.org/en/blog/vulnerability/june-2026-security-releases

Say hello to 🐣 fledgling - a new tool to create new npm packages and setup/sync trusted publishing (OIDC) settings. Works great for one offs, but even better in a monorepo! just `npx fledgling`

You should follow Ethan!

🇮🇹 Looking for the perfect reason to visit #Italy this year? #NodeConfEU has you covered! Join #NodeJS #developers, creators, and #tech leaders from across Europe for an unforgettable experience of talks, networking, and community in #Bologna, Italy. 🎟️ Grab your ticket now www.nodeconf.eu

Given the feedback, we decided to move forward and start verifying maintainers and projects in the npm ecosystem. Later on, large ecosystem projects could also become verifiers for their communities. Reach out if you're interested in these conversations! Here are the first 100+ verifications 🩷

Today I gave a talk JSNation about the life cycle of ESM in Node.js, how it differs in other environments and the new features that will affect these stages. Slides: github.com/joyeecheung/...

🎟️ One Early Bird Ticker left for #NodeConfEU 2026! Secure your spot now! www.nodeconf.eu #Techconference #NodeJS #JavaScript

CFP for /dev/mtl 2026 is open 'til end of the month 🙂 sessionize.com/conference-d... This year at the Concordia University Conf Center 1 track EN, 1 track FR Pinging my local speakers, in case you didn't know 😉 @nickyt.online @danidou.bsky.social @ruyadorno.com @mendy.dev

#NodeConf EU is back! If you've been working on something worth sharing about #Node.js internals, performance, #developer experience, or anything in between, this is the stage for you! nodeconf.eu See you in Bologna! 🇮🇹

Node.js Interactive returns at RenderATL 2026. Join maintainers, contributors, and developers for two days of talks on Node.js performance, security, AI tooling, infrastructure, and the real world challenges of running JavaScript at scale. https://bit.ly/43aFSBs

we're looking for our first devrel engineer at @vlt.sh. you'll help us get our package manager and registry into the hands of as many people as possible! if that sounds exciting ⬇️

⚡️ We're looking for a DevRel person at @vlt.sh - based in our Toronto 🇨🇦 HQ. You'll work closely w/ me & should love the idea of owning various aspects of product marketing. You'll be vlt's biggest fan & advocate; molding this unique role in a way that plays to your strengths & ours.

Toronto friends! we're looking for a DevRel to join the @vlt.sh team there! #hiring #toronto www.vlt.io/careers/deve...

Blind tickets for NodeConf EU are *gone* — but regular tickets are live 🎟️ If you're planning to join us in Bologna, Italy for the best Node.js conference of the year, now's the time. CFP is open too — come speak! www.nodeconf.eu

in Toronto today with @lukekarrys.com !!! ✌️ of course I had to start the day with a 15km bike ride 🚲🚲🚲

Another day, another Node.js release :) Node.js 24.16.0 is out! A few test runner features, `randomUUIDv7`, plus many more bug fixes and small improvements. Full changelog and download links at nodejs.org/en/blog/rele...

Node.js 26.2.0 is out! `stream.compose` is now stable, `node:fs` integrates with the new `Temporal` API, and a fair load of bug fixes. Full changelog and download links at nodejs.org/en/blog/rele...

and by Ireland Matteo means Italy of course 😅

1/ I’m still processing what’s going on in tech at the moment. I used to feel at home in that world. It used to feel incredibly creative and positive. Now it’s increasingly full of bugs, dark addicting patterns and AI slop. 2ality.com

Node.js v22.22.3 is out 🚀🚀 Changelog 👇 nodejs.org/en/blog/rele...

This is awesome!! Check out @vlt.sh for this in the JS ecosystem. www.vlt.io/products/rep...

It’s almost as if we said securing GitHub actions is really difficult and maybe it shouldn’t be at the heart of our security model for publishing.

NodeConf EU is back in Bologna, Italy and it's going to be special 🇮🇹 Great talks, better people, and the kind of hallway track you can't replicate online. Blind tickets? Already gone. CFP open. Regular tickets moving. Join us: www.nodeconf.eu

Node.js 26.1.0 is out, with a new `node:ffi` module, `crypto.randomUUIDv7()`, and many more features and bug fixes. Full changelog and download links at nodejs.org/en/blog/rele...

For those who build or redistribute Node.js - as the V8 implementation of temporal depends on temporal_rs, this also means starting from v26 building Node.js fully requires a Rust toolchain. See github.com/nodejs/node/...

The hidden gem is that @nodejs.org majors and LTS cycles got WAY easier to understand: 2026 -> v26 2027 -> v27 2028 -> v28 ... Aall of them go LTS for 18 months meaning each major is supported for 2 years. The new graphic tells the best story here: nodejs.org/en/blog/anno...

Node.js v26.0.0 is out 💚 Temporal API enabled by default, V8 14.6, Undici 8, and key deprecations as we keep modernizing the platform. Check it out nodejs.org/en/blog/rele...

The 2026 Node.js London Collaboration Summit trip report is officially live! 🚀 We gathered 50+ contributors to discuss the biggest technical shifts coming to the runtime. Big thanks to Bloomberg for hosting! 🇬🇧 Check out the full recap and recordings here: https://bit.ly/3OHPLmz

Broadcasting GPS on the local network https://evertpot.com/broadcasting-gps-on-local-network/

devEngines started as @geoffreybooth.bsky.social and I in DMs 2 years ago. It's now supported in @npmjs.bsky.social & @pnpm.io, and later this month will be our recommended way for developers at Netflix to define runtime and package manager versions in their projects. docs.npmjs.com/cli/v11/conf...

While others race away from Open Source, @vlt.sh is doubling down. 🖤⚡ Today we’re announcing our renewed commitment to @opensourcepledge.com and investing back into the ecosystem. www.vlt.io/blog/doublin...

DMNO (varlock) was one of the fastest growing open-source orgs on GitHub in Q1. Thanks for the recognition @supabase.com >commitvc #osscarindex osscar.dev/org/dmno-dev

pnpm v11.0.0 is released! The "latest" dist-tag still points to v10, so install it via "pnpm self-update latest-11" github.com/orgs/pnpm/di...

Node excitement 😉 Congrats to @targos.dev on landing the V8 14.6 upgrade in upstream Node, heading for Node v26 which will be released very soon 🎉 This is the first version of V8 in Node to support unflagged Temporal 👍 github.com/nodejs/node/...

You can use nvm to kick the tires on `node:ffi`! NVM_NODEJS_ORG_MIRROR=https://nodejs.org/download/nightly nvm install 26

Do not unleash your AI-powered bot into people's GitHub repos without asking first. If you do that on any of the repos I maintain, your bot is likely to get banned. (I've already banned a few).

We are happy to announce the NodeConf EU is returning in 2026. This time, things will be a little different. While the Irish countryside made for a beauttiful backdrop for getting the community together to talk about Node.js, there have always been a number of logistical challenges to hosting there;

I'm working on a feature called package maps for Node.js - it's leveraging everything I learned about package resolution these past six years, in a design that's both simple and flexible enough to be backward compatible with existing installs. I'm very excited about this! github.com/nodejs/node/...

My terminal diff tool, hunk, has added a lot of good stuff: - horizontal scrolling w/ mouse support - pinned file headers - way better file browser UI - draggable scrollbar - perf & bug fixes ⬇️ Here's what it looks like today

dark mode on www.npmjs.com ???

📖 This article by @sarahgooding.bsky.social at @socket.dev highlights a concerning trend (ref. socket.dev/blog/attacke...) 📕 Story time: this kind of supply chain targeting isn't unique. I myself & everyone on our team @vlt.sh have been the targets of consistent, concerted efforts.

I've said this before. I'll say it again. The LOC touched in a PR doesn't matter. It's not an indicator of productivity. A one word change can carry more weight, positive or negative, than a 20k LOC change. The only time LOC matters is to the poor soul that has to review it.

Unfortunately, security reports are no longer eligible for bounties due to the IBB program being paused

this is one of my favorite parts of the @vlt.sh CLI. it uses @socket.dev security data to prevent known malware from running lifecycle scripts like postinstall! and it’s powered by queries under the hood so you could make it as granular as you wanted (but we ship with safe defaults)

I heard you like fast package managers? What about fast registries? It's been a roller coaster of a month but our team has made some serious headway w/ even more improvements in the works. Gotta keep the registry fast so y'all can nab the next Claude Code leak.