Rafael Gonzaga | Node.js
@rafaelgss.dev
š¤ 711
š„ 55
š 87
Node.js Technical Steering Committee member
pinned post!
The State of Node.js Performance 2024 is out! š Check it out
nodesource.com/blog/State-o...
loading . . .
State of Node.js Performance 2024
This article revisits the State of Node.js performance, focusing on comparing versions 20 through 22. Providing how Node.js has evolved over the past year.
https://nodesource.com/blog/State-of-Nodejs-Performance-2024
about 1 year ago
0
64
20
New release of bench-node v0.14.0! Two important features were released:
github.com/RafaelGSS/be...
loading . . .
Release v0.14.0 Ā· RafaelGSS/bench-node
0.14.0 (2025-12-17) Features add dce detection plugin (#131) (2e2a6be) add t-test mode for statistical significance testing (#133) (53e20aa) Narrow the bar display by another couple of characters ...
https://github.com/RafaelGSS/bench-node/releases/tag/v0.14.0
8 days ago
1
1
0
Right on time! Lovely
@openjsf.org
10 days ago
1
8
0
reposted by
Rafael Gonzaga | Node.js
OpenJS Foundation
30 days ago
Want to dive in further? Check out Rafaelās release of
@nodejs.org
25:
twitch.tv/videos/25925...
loading . . .
Releasing Node.js v25.0.0! - rafaelgss on Twitch
rafaelgss went live on Twitch. Catch up on their Software and Game Development VOD now.
https://twitch.tv/videos/2592538705
0
3
2
reposted by
Rafael Gonzaga | Node.js
OpenJS Foundation
30 days ago
SEMVER MAJORS ARE BORING šØ Major releases mostly bring breaking changes, not shiny new features. The fun stuff? Thatās hiding in the minors.
@rafaelgss.dev
talks about why you should follow the minor releases in our latest JavaScript Security Snapshot.
loading . . .
1
11
2
I should get back to this platform. Iāve scrolled it for like 5 minutes and I found many interesting topics that I donāt see in one week of X.
about 1 month ago
4
24
0
reposted by
Rafael Gonzaga | Node.js
James Snell
about 1 month ago
ok so... I'm writing a book. It's called JavaScript In Depth (
www.manning.com/books/javasc...
) ... the first four chapters are available by Manning. This has been a difficult project and will continue to be so. The reason is that it isn't a How To book that focuses only on how to use the langauge
loading . . .
JavaScript in Depth - James M. Snell
Explore the inner workings of the worldās most popular programming language and enjoy the power and control that comes only from deep knowledge! In JavaScript in Depth, JavaScript and Node legend Jame...
https://www.manning.com/books/javascript-in-depth
3
30
5
reposted by
Rafael Gonzaga | Node.js
OpenJS Foundation
about 1 month ago
Before automated workflows, releasing
@nodejs.org
meant 20 manual steps. Now itās one command. š
@ulisesgascon.com
and
@rafaelgss.dev
share how the Node.js build team went from a rack of Raspberry Pis in someoneās garage to full release automation. šBuild Team on GitHub:
github.com/nodejs/build
loading . . .
0
18
7
Live now!
about 1 month ago
0
1
0
reposted by
Rafael Gonzaga | Node.js
Wes
about 1 month ago
It was great working with you on this! As much as I dislike that we had to do this work, I think it is important that we did it so there is a thorough and accurate resource about the current state of things.
0
2
1
reposted by
Rafael Gonzaga | Node.js
OpenJS Foundation
about 1 month ago
With npm supply chain attacks on the rise, secure publishing practices are becoming a pressing concern for anyone maintaining npm packages. ā ļø We've released updated guidance to help maintainers reduce exposure, strengthen release processes, and protect the ecosystem:
openjsf.org/blog/publish...
loading . . .
Publishing More Securely on npm: Guidance from the OpenJS Security Collaboration Space | OpenJS Foundation
The OpenJS Security Collaboration Space has been working closely with GitHubās npm team to understand how new security features affect projects and maintainers, especially as threats and tools keep ev...
https://openjsf.org/blog/publishing-securely-on-npm
1
29
13
Thanks for your hard work on this
@notwes.bsky.social
add a skeleton here at some point
about 1 month ago
1
4
0
reposted by
Rafael Gonzaga | Node.js
OpenJS Foundation
about 1 month ago
Too many
@nodejs.org
users are running old versions š¬ The team is exploring changes to the release schedule to fix that.
@rafaelgss.dev
shares all the details in our latest JavaScript Security Snapshot. Be a part of the conversation on releases:
github.com/nodejs/lts-s...
loading . . .
0
16
5
reposted by
Rafael Gonzaga | Node.js
OpenJS Foundation
about 1 month ago
Ever wonder why
@nodejs.org
drops new versions like clockwork? Hereās the scoop. ā±ļø
@rafaelgss.dev
shares all the details about the Node.js release schedule in our new series, JavaScript Security Snapshot.
loading . . .
2
25
6
Done
add a skeleton here at some point
about 2 months ago
0
5
1
reposted by
Rafael Gonzaga | Node.js
Jordan Harband
2 months ago
iām starting to get that āthis word is weird nowā feeling from hearing so many sentences like āreleasers releasing releasesā at the
@nodejs.org
collab summit
0
7
1
reposted by
Rafael Gonzaga | Node.js
Ruy Adorno
2 months ago
Starting the day at the Node.js Collab Summit
#nodejs
#javascript
1
20
2
reposted by
Rafael Gonzaga | Node.js
OpenJS Foundation
2 months ago
Introducing š„š„š„ our JavaScriptLandia award recipients for this year! Beyond building new features, our recipients guide others, maintain essential systems, document the hard parts, and strengthen the community every step of the way. š Read more about our honorees here:
hubs.la/Q03NQvx10
loading . . .
0
17
10
reposted by
Rafael Gonzaga | Node.js
naugtur
2 months ago
I'm excited about net in permissions!
add a skeleton here at some point
0
13
4
Node.js 25 is here! We have upgraded V8 to 14.1, bringing major JSON.stringify performance improvements and JIT pipeline optimizations. This release introduces the permission model --allow-net, Web Storage is enabled by default, and more!
nodejs.org/en/blog/rele...
loading . . .
Node.js
Node.jsĀ® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.
https://nodejs.org/en/blog/release/v25.0.0
2 months ago
0
96
24
reposted by
Rafael Gonzaga | Node.js
Node.js
2 months ago
Node.js v24.10.0 is out. * Per-stream inspectOptions support in console * Removal of util.getCallSite (in favour of util.getCallSites) * Upgraded OpenSSL to 3.5.4 and npm to 11.6.1 * Various src and benchmark optimizations
https://nodejs.org/en/blog/release/v24.10.0
loading . . .
Node.js
Node.jsĀ® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.
https://nodejs.org/en/blog/release/v24.10.0
0
41
8
reposted by
Rafael Gonzaga | Node.js
Ulises Gascón
3 months ago
Welcome
@rafaelgss.dev
to the
@openjsf.org
#CNA
team! š š š
github.com/openjs-found...
loading . . .
Nominate @rafaelgss as CNA Coordinator by UlisesGascon Ā· Pull Request #297 Ā· openjs-foundation/security-collab-space
@RafaelGSS has made outstanding contributions to the open source security ecosystem, particularly through his leadership in the Node.js project and related tooling. He brings deep expertise in vuln...
https://github.com/openjs-foundation/security-collab-space/pull/297
1
5
3
reposted by
Rafael Gonzaga | Node.js
Wes
3 months ago
Lots of GREAT progress and discussion on our
@expressjs.bsky.social
Performance Working Group. Thanks everyone who is participating as I think this is the second most (security comes first) impactful thing we could be working on. For anyone interested in helping out:
github.com/expressjs/pe...
loading . . .
GitHub - expressjs/perf-wg: Performance Working Group
Performance Working Group. Contribute to expressjs/perf-wg development by creating an account on GitHub.
https://github.com/expressjs/perf-wg
0
11
3
reposted by
Rafael Gonzaga | Node.js
jonchurch
3 months ago
Our goal is to provide guidance and tooling for perf based decisions to the maintainers under our umbrella. Aligning our philosophy for how/what we monitor and how to interpret the results lets us be consistent across our 50+ packages. Ive been learning a lot so far, and big ty to
@rafaelgss.dev
add a skeleton here at some point
0
2
2
Node.js v24.6.0 is outš Highlights: * Use your systemās trusted certificates with NODE_USE_SYSTEM_CA=1 * crypto: ML-DSA (KeyObject/sign/verify) * http: server.keepAliveTimeoutBuffer * zlib: Zstd dictionary support * fs: Utf8Stream (from SonicBoom) Changelog:
nodejs.org/en/blog/rele...
loading . . .
Node.js ā Node.js v24.6.0 (Current)
Node.jsĀ® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.
https://nodejs.org/en/blog/release/v24.6.0
4 months ago
1
24
6
I'm live doing Node.js Core benchmark work!
www.twitch.tv/rafaelgss
loading . . .
RafaelGSS - Twitch
Node.js Core Mentoring
https://www.twitch.tv/rafaelgss
5 months ago
0
4
0
I've been working on something interesting (at least for me)
github.com/nodejs/node/...
loading . . .
benchmark: add calibrate-n script by RafaelGSS Ā· Pull Request #59186 Ā· nodejs/node
benchmark: add calibrate-n script This script should help identify the best N when creating/updating benchmarks It's not new that our benchmark suite takes a huge amount to conclude. I have e...
https://github.com/nodejs/node/pull/59186
5 months ago
0
2
0
Hi folks, We will have a Node.js core mentoring live stream today Stay tuned!
5 months ago
0
3
1
Node.js v24.4.0 is out! š What's new? ⢠crypto.hash() supports outputLength (XOF) ⢠fs.mkdtempSync() gets disposable mode ⢠--watch-kill-signal lands ⢠permission.has('addon') is now supported ⢠spawn() propagates permission flags ⢠sqlite adds readBigInts More in:
nodejs.org/en/blog/rele...
loading . . .
https://nodejs.org/en/blog/release/v24.4.0
6 months ago
0
23
7
Live on!
twitch.tv/rafaelgss
7 months ago
0
0
0
A warm welcome to our newest Node.js TSC member: Filip Skokan! Happy to see you onboard!
github.com/nodejs/node/...
loading . . .
doc: add Filip Skokan to TSC by RafaelGSS Ā· Pull Request #58499 Ā· nodejs/node
Refs: nodejs/TSC#1740 cc: @panva
https://github.com/nodejs/node/pull/58499
7 months ago
0
9
5
reposted by
Rafael Gonzaga | Node.js
Maksim Sinik
7 months ago
Folks, right now
@rafaelgss.dev
is doing an awesome livestram on
m.twitch.tv/rafaelgss
talking about Node.js threads, memory management and perfs. Join us!
loading . . .
RafaelGSS - Twitch
Node.js Core Mentoring
https://m.twitch.tv/rafaelgss
1
6
1
reposted by
Rafael Gonzaga | Node.js
Node.js
8 months ago
ā ļø Security release pre-alert: We will release new versions of v20.x, v22.x, v23.x, v24.x release lines on or shortly after May 14, 2025, in order to address: - 1 high severity issue - 1 moderate severity issue - 1 low severity issue Details:
nodejs.org/en/blog/vuln...
loading . . .
Node.js ā Wednesday, May 14, 2025 Security Releases
Node.jsĀ® is a JavaScript runtime built on Chrome's V8 JavaScript engine.
https://nodejs.org/en/blog/vulnerability/may-2025-security-releases/
0
34
12
Iād love to do something like that but in person⦠kind of collab summit workshop
add a skeleton here at some point
8 months ago
1
2
0
Happy to announce @nodejs v24.0.0 š! This release brings several updates, including the V8 13.6 and npm to version 11. As a reminder, Node.js 24 will enter long-term support (LTS) in October, but until then, it will be the "Current" release Check it
nodejs.org/en/blog/rele...
loading . . .
https://nodejs.org/en/blog/release/v24.0.0
8 months ago
2
99
22
A handy way to test Node.js release candidates. I suggest you have something similar in your test suite, so you can act before a semver-major release of Node.js gets out.
github.com/fastify/fast...
loading . . .
ci: add support to test release candidates by RafaelGSS Ā· Pull Request #6103 Ā· fastify/fastify
This is just an idea, but I think it would be interesting to be able to test Node.js release candidates, specially for semver-major versions
https://github.com/fastify/fastify/pull/6103
8 months ago
0
3
0
RC.2 Node.js v24.0.0
github.com/nodejs/node/...
loading . . .
2025-04-23, Version 24.0.0 (Current) by RafaelGSS Ā· Pull Request #57609 Ā· nodejs/node
Cut-off date: 2025-03-24 Target release date: 2025-04-23 Roadmap: nodejs/Release#1081 TODO: V8 Update [help wanted] deps: update V8 to 13.4Ā #57114 Update REPLACEME Update notable changes 2025...
https://github.com/nodejs/node/pull/57609#issuecomment-2770395241
9 months ago
0
5
1
Recent updates on Node.js CVE to EOL lines. TL;DR The Node.js team has decided to update previous vulnerability specific CVEs to cover EOL releases, reflecting their ongoing security risks. See:
nodejs.org/en/blog/vuln...
loading . . .
Node.js ā Updates on CVE for End-of-Life Versions
Node.jsĀ® is a JavaScript runtime built on Chrome's V8 JavaScript engine.
https://nodejs.org/en/blog/vulnerability/updates-cve-for-end-of-life
10 months ago
0
23
5
I'm live on Twitch again!
www.twitch.tv/rafaelgss
loading . . .
RafaelGSS - Twitch
Node.js Core Development
https://www.twitch.tv/rafaelgss
10 months ago
0
2
0
I'm posting some shorts on Youtube/Instagram of my sessions teaching "How to contribute to Node.js core" on Twitch. Check my social media in
github.com/RafaelGSS/Ra...
loading . . .
https://github.com/RafaelGSS/RafaelGSS/blob/master/README.md
11 months ago
0
1
0
With this release we have also issued the CVEs to EOL versions of Node.js
add a skeleton here at some point
11 months ago
1
13
4
We'll have a second session of Node.js mentoring today! Join us via OpenJS Foundation Slack (nodejs-mentoring channel). See you all in 30 minutes. Live:
www.twitch.tv/rafaelgss
loading . . .
Twitch
Twitch is the world
https://www.twitch.tv/rafaelgss
11 months ago
0
0
0
ā ļøThe
@nodejs.org
project will issue a security release for versions 23.x, 22.x, 20.x, 18.x on or shortly after, Tuesday, January 21.
nodejs.org/en/blog/vuln...
loading . . .
https://nodejs.org/en/blog/vulnerability/january-2025-security-releases
12 months ago
1
39
16
reposted by
Rafael Gonzaga | Node.js
Rob Palmer
12 months ago
Performance work can be disproportionate.
@joyeecheung.bsky.social
makes a one-line change to a build script to cure a 50% regression in startup time.
add a skeleton here at some point
0
27
5
I wrote an alias to `npx` that sets the Permission Model node options. You can use it in the same way you use `npx` but, with Node.js Permission Model restrictions :) Put this in your .zshrc/.bashrc
gist.github.com/RafaelGSS/f8...
12 months ago
1
5
2
reposted by
Rafael Gonzaga | Node.js
patak
12 months ago
Explore the GitHub Sponsors pages of the maintainers of your favorite OSS projects. Find an awesome folk who deserves more support, then press the sponsor button to show them we appreciate their work. Today is a good day to give back.
0
105
22
Live at
www.twitch.tv/rafaelgss
loading . . .
RafaelGSS - Twitch
Node.js Core Development
https://www.twitch.tv/rafaelgss
12 months ago
0
3
0
Did you know you can run npx with permission model enabled by just passing it through the --node-options npx flag?
github.com/nodejs/node/...
loading . . .
doc: add section about using npx with permission model by RafaelGSS Ā· Pull Request #56539 Ā· nodejs/node
cc: @wraithgar
https://github.com/nodejs/node/pull/56539
12 months ago
1
13
3
šØ
@nodejs.org
will issue CVE for EOL (End-of-Line) release lines in the next security release. Read more at
nodejs.org/en/blog/vuln...
loading . . .
Node.js ā Upcoming CVE for End-of-Life Node.js Versions
Node.jsĀ® is a JavaScript runtime built on Chrome's V8 JavaScript engine.
https://nodejs.org/en/blog/vulnerability/upcoming-cve-for-eol-versions
12 months ago
2
27
12
Announcing bench-node officially!
blog.rafaelgss.dev/bench-node-a...
loading . . .
Announcing bench-node
Tech insights on Performance, Security and Node.js from Rafael Gonzaga, Node.js TSC member
https://blog.rafaelgss.dev/bench-node-announcement
12 months ago
0
11
1
With this PR you should be able to see clearly the Node.js threads and identify in some scenarios which thread is consuming more of your resources
github.com/nodejs/node/...
I started it in yesterday's livestream and made some progress today
loading . . .
src,lib: use uv_thread_setname to a better multi-thread debugging by RafaelGSS Ā· Pull Request #56416 Ā· nodejs/node
Note: This PR depends libuv/libuv#4599 to be released by libuv team. TODO: Work on tests I'm also patching uv to set the default thread name, but it's up to them to accept it, I don'...
https://github.com/nodejs/node/pull/56416
12 months ago
0
4
0
Load more
feeds!
log in