Type stripping is now stable. Enjoy 🌞

Node.js v24.11.1 LTS is out 💚 Notable changes + updates here: nodejs.org/en/blog/rele...

Ever wonder why @nodejs.org drops new versions like clockwork? Here’s the scoop. ⏱️ @rafaelgss.dev shares all the details about the Node.js release schedule in our new series, JavaScript Security Snapshot.

Okay folks, it's time: I'm hiring! Looking for 5(!) developer relations engineers across the world! Our company is remote-first but this role involves in-person appearances at events so although you don't need to work in a specific office we are focusing our search in specific metro areas:

I knew speaking at @jsconf.bsky.social 2025 would be hard, because so much of what I had to talk about I learned from Mikeal Rogers – and am still learning even now. The goal of the talk was to tell part of that story, a story about how the web isn't finished, yet 💡 all-docs.talks.charlie.dev

I am looking for a full-time job. Being independent in open source for 3.5+ years has been wonderful. I've gotten done most of the high-level goals I wanted to, and miss having people & structure around me. If you know of a role for a staff-level TypeScript+web developer, let me know! 🙂

New @nodejs.org 24.11.0 release. nodejs.org/en/blog/rele... This release marks the transition of Node.js 24.x into Long Term Support (LTS). It will continue to receive updates through to the end of April 2028.

📺 The recording for the morning sessions of the Node.js Collab Summit 2025 is up on Youtube! Thanks @vlt.sh for sponsoring my participation and sending in the whole crew! #nodejs #javascript youtu.be/ppi87YjU9x0

I’m looking for my next opportunity 👨‍💻, short/long contracts or part/full time. My experience is 15 years across the stack and architecture often focused on open source and next generation developer tooling, libraries, frameworks in the TypeScript space. If your company or project is ...

My JSConf talk is up 📺 it's mostly a recap of new features that landed in the Node.js runtime last year, watch it here: youtu.be/1XFWACCrL5I?... #nodejs #javascript

Missed #JSConf 2025? No worries, we’ve got you. 🎬 All the talks are now on YouTube. Watch them here: hubs.la/Q03PNmCK0

🚀 Noop Functions vs Optional Chaining: A Performance Deep Dive I ran benchmarks comparing `noop()` vs `obj?.fn?.()` and the results surprised me. Spoiler: Noop functions are 5.5x to 8.8x faster. Here's what you need to know 🧵

If you think npm's architecture is good, go watch @darcyclarke.me's talk. The dependency graph is complex and @vlt.sh is reinventing it in a smart and unique way. www.youtube.com/watch?v=o8nG...

Seriously, @npmjs.bsky.social, delay this. Timelines and messaging, at a minimum, are insufficient.

Built-in HTTP proxies are now on v22 😇 (Going to update the version mentions in a WIP guide on using Node.js in enterprise network environments)

🚀 New blog post: "From curl Commands to Type-Safe API Clients" Ever copied curl commands from DevTools to reverse-engineer an API? What if you could turn those into production-ready, type-safe HTTP clients automatically? Here's how 👇

Fantastic talk by @joyeecheung.bsky.social, a must watch to package authors that want to stay up-to-date on how to ship packages in this post require(esm) era: youtu.be/I0jvOJW7NaI #nodejs

Node.js v22.21.0 is out 🙌 Check out the notable changes here: nodejs.org/en/blog/rele...

Huge thanks to the @vlt.sh team for building something new and refreshing in the world of package managers and taunting me with LEGO to try it out. Join me and check them out: www.vlt.sh

Starting the day at the Node.js Collab Summit #nodejs #javascript

Here are the slides for my Node.js year in review talk: speakerdeck.com/ruyadorno/no... #nodejs #javascript #JSConf

I’m beyond thrilled to be the recipient of this year’s #JavaScriptLandia “Outstanding Contribution from a New Arrival” award! This award is truly a testament to the fact that anyone, with faith and effort, can make a meaningful impact in #OpenSource. Thank you, @openjsf.org

Node.js 25 is here! We have upgraded V8 to 14.1, bringing major JSON.stringify performance improvements and JIT pipeline optimizations. This release introduces the permission model --allow-net, Web Storage is enabled by default, and more! nodejs.org/en/blog/rele...

⚡️ All set up for #JSConf ! Stop by to talk with the @vlt.sh team if you’re around!

Node.js v24.10.0 is out. * Per-stream inspectOptions support in console * Removal of util.getCallSite (in favour of util.getCallSites) * Upgraded OpenSSL to 3.5.4 and npm to 11.6.1 * Various src and benchmark optimizations https://nodejs.org/en/blog/release/v24.10.0

👋🏻 If you're at @jsconf.bsky.social NA this week, come say hi to our team @vlt.sh ⚡📦 @ruyadorno.com, @lukekarrys.com & our Design Engineer (Jason Korol) will be there for both the conf & Node.js Collab Summit 🚀🐢

Do anyone knows if there's a JS conference happening in Mexico City around spring time next year? 🤔

🚀 BIG NEWS: We just shipped @platformatic/python - run Python ASGI apps INSIDE your Node.js process! This changes everything for AI/ML + Node.js apps 🧵 youtu.be/8eAAP9IF4xA

So cool to be in the room at React Conf when the new React Foundation was announced 💙 with its new home at the Linux Foundation. At @openjsf.org we’re celebrating this big win for JavaScript communities.

Igalia's @joyeecheung.bsky.social will be speaking about "Shipping Node.js packages in 2025,” focused on migrating dual/faux/CJS packages to ESM-only at Nordic.js on Friday, 3rd October at 10:30 CEST nordicjs.com/2025/speaker... Come say hi!

I've come to accept AI will write the majority of code. So earlier this year I started exploring other ways AI could help developers. That turned into this company, Modem. We're building an agent that does PM triage work for you and delivers product context to your IDE. More here: modem.dev 🙏

Just tested and it works with varlock.dev!

Weekend project fixing up this playhouse on the back alley for the neighborhood kids

we now have an @e18e.dev github action which can diff your dependencies in PRs things like: - change in trust level (loss of trusted publisher) - adding >threshold dependencies - adding >threshold install size - bundle size difference (vs main) - duplicate deps early days so please give feedback!

A heads up to anyone attending the upcoming JSConf in October and locals to the Maryland state area. We're hosting the Node.js Collab Summit next October 17 and registration is now open for in-person participation: github.com/openjs-found...

Just released @nodejs.org 22.20.0. nodejs.org/en/blog/rele...

🚀 BIG NEWS: We just open-sourced the Intelligent Command Center (ICC) for Node.js! After years of watching teams struggle with Node.js on Kubernetes, we're changing the game. The problem? K8s was built for Java/.NET, not Node.js's async model. The cost? 40% overprovisioning. 🧵

Seeing the recent supply-chain attacks made me prioritize this item from our backlog as I wanted a quick way to know if any of my local projects have been affected. Meet the new vlt client `:host()` Query selector: blog.vlt.sh/blog/host-co... #javascript #nodejs #packages

Early npm and Node.js design decisions resulted in the biggest software ecosystem in existence, for the most used programming language in the world. We shouldn't pretend this is a net bad thing. But yes, it came with tradeoffs. A more competent current steward could have mitigated these tradeoffs.

Alright, let's make it official… I am super-proud to tell you that I have finally published the print version of my book: "Legacy Code: First Aid Kit" 🎉 📕 🥲

ℹ️ Don't know who needs to hear this but npm has had a --before=<date> flag since v6.9.0 (02/2019): github.com/npm/cli/blob/v… Setting a relative date is easy w/: $ npm install --before="$(date -v -7d)" # & only get registry deps that are over a week olddocs.npmjs.com/cli/v11/usin...re

Y'all this is non-stop. 😰 Woke up to another npm supply chain attack this morning. This malware is identical to the one that hit 40+ packages yesterday: cc: @campuscodi.risky.biz

These attacks used to be more rare, but now we're seeing popular packages getting compromised every week. Check your dependencies. cc: @campuscodi.risky.biz

Honestly serious: JUST DON'T UPDATE PACKAGES RIGHT NOW. It is unclear to me yet, but this is looking pretty wide spread. Better be safe than sorry, just go touch some grass.

Node.js v24.8.0 (Current) is out 💥 Details: nodejs.org/en/blog/rele...

🚨 Breaking: npm author Qix compromised. Malicious package versions published in projects that typically see hundreds of millions of downloads each week. Details: socket.dev/blog/npm-aut...

⚡ Point. Click. Discover. 🚀 We're excited to unveil a new Query Builder to @vlt.sh's UI. It's now dead simple to visually navigate complex dependency graph filters without typing a thing. No need to memorize our selector syntax (if you don't want to).

🔥 Just your yearly reminder that the JS ecosystem could be much worse off... stuck in the *first level* of "Dependency Hell" like many other ecosystems with minimal options/diversity... lucky for us, we get to face much hotter problems 😉

Node.js v20.19.5 is out 🎉 Changelog: nodejs.org/en/blog/rele...

🌐 Reminder from the Node.js TSC meeting today: We're having a Collaborator Summit next October 17th! github.com/openjs-found...