Welcome @rafaelgss.dev to the @openjsf.org #CNA team! 👏 👏 👏 github.com/openjs-found...

ℹ️ Don't know who needs to hear this but npm has had a --before=<date> flag since v6.9.0 (02/2019): github.com/npm/cli/blob/v… Setting a relative date is easy w/: $ npm install --before="$(date -v -7d)" # & only get registry deps that are over a week olddocs.npmjs.com/cli/v11/usin...re

Lots of GREAT progress and discussion on our @expressjs.bsky.social Performance Working Group. Thanks everyone who is participating as I think this is the second most (security comes first) impactful thing we could be working on. For anyone interested in helping out: github.com/expressjs/pe...

Welcome @bjohansebas.bsky.social to the @expressjs.bsky.social Security Triage team! 👏 👏 👏 github.com/expressjs/se...

🗞️ Exciting update: #webpack now has an official Threat Model! It sets clear boundaries, improves #security awareness, and strengthens our #ecosystem for everyone. 💪 github.com/webpack/security-wg/pull/9

🚩 Keep up to date with @nodejs.org by watching the #Nodejs Security Working Group's last meeting on YouTube! www.youtube.com/watch?v=2_ex...

The maintainer of one of our dependencies, debug, was the target of a phishing attack resulting in the release of [email protected] with malware. Supply chain security is all of our responsibilities. Be careful out there, and for today don't update your deps. socket.dev/blog/npm-aut...

🍿 Exciting news! The @openjsf.org Foundation #AI Collaboration Space holds its first meeting next week. A community hub where developers, maintainers and policy thinkers explore how #JavaScript connects billions of people to #AI. github.com/openjs-found...

🔒 Securing #OpenSource projects is not an easy task. ✨ Here’s a great #initiative helping the #maintainers and community move forward: 👉 openjsf.org/blog/securit...

🗞️ Exciting news: #webpack now has a Security Working Group! We’ll: 👉 Define triage & policies 👉 Guide secure plugin development 👉 Improve report processes 👉 Promote best practices 👉 Support #OpenJS & #OpenSSF initiatives github.com/webpack/secu...

The @expressjs.bsky.social project has helped transfer over iconv-lite (with the awesome effort of @bjohansebas.bsky.social). Hopefully we can be a good home for this package which adds another 446M monthly downloads to the projects scope. github.com/pillarjs/ico...

Say hello to the newest member of the @expressjs.bsky.social family 👋 iconv-lite: Convert character encodings in pure #javascript. And yes… a new release is baking in the oven 🔥 github.com/pillarjs/ico...

✨ The #OSPO Book is here!✨ github.com/todogroup/os...

🚀 One step closer to #jQuery 4! blog.jquery.com/2025/08/11/j...

Want to see what we've accomplished with the node.js ‘userland-migrations’ initiative? Check out these awesome codemods codemod.link/nodejs-offic... I hope your depreciation is already supported. If not, go to git.new/userland-mig...

✨ Proud to be one of the maintainers of @expressjs.bsky.social in the @github.com Secure Open Source Fund! Securing the #OpenSource #SupplyChain is a team sport 💚 github.blog/open-source/...

JS Conf US is happening again! This is a big deal, it has not occurred for some time. I'm thrilled to keynote and speak alongside folks I deeply admire: @devdevcharlie.com @evanyou.me @aysegul.bsky.social, more My talk is on fundamentals! We'll go deep into plaforms and systems, using my drawings

🔒 Security update: Check out the July 2025 Security Releases for Express Stay safe out there 🫡 expressjs.com/2025/07/31/s...

ECMAScript Excitement 🎉 Today, TC39 advanced these proposals: 2️⃣.7️⃣ Intl Era and Month Code 2️⃣ Import Buffer 1️⃣ Module Global

ECMAScript excitement 😉 Congrats to @michael.ficarra.me on advancing the Iterator Sequencing proposal to Stage 3 at TC39 this week 🎉 let it = Iterator.concat(it1, it2, ...) It helps you create an iterator by stitching together a sequence of iterators 👍 github.com/tc39/proposa...

ECMAScript excitement 😉 Congrats to @bakkot.com on advancing Math.sumPrecise to Stage 4 at TC39 this week 🎉 let vals = [1e20, 0.1, -1e20]; Math.sumPrecise(vals); //👉 0.1 It lets you calculate the sum of an array of numbers. Manual addition in a loop can lose precision - use this API instead.

😏 The Great Monkey-Patch Safari in @expressjs.bsky.social has begun. Join the adventure with critical hacks and hotfixes ahead! github.com/expressjs/ex...

🏖️ The latest issue of my #newsletter is out, number 007. What started as a quiet summer turned into a season full of open source security work, big releases, and exciting milestones. blog.ulisesgascon.com/newsletter-i...

🗳️ I just cast my vote for the 2025 OWASP WASPY Awards Election! Proud to support the amazing contributors in the @owasp.org community. 🙌

🚀 New #GitHub Sponsorship tiers for companies I help maintain #Nodejs, #Express and 200+ npm packages Sponsorship is not charity. It is strategy for you: ✅ Early ecosystem insights ✅ Async collab with your team ✅ Sync on roadmap and priorities github.com/sponsors/Uli...

🔒 Security update: Check out the June 2025 Security Releases for Express Sorry for the delay in the blog publication — stay safe out there 🫡 expressjs.com/2025/07/18/s...

🚀 Just released [email protected] 📦 🍿 #release details: github.com/expressjs/ti...

🚀 Just released [email protected] 📦 🍿 #release details: github.com/expressjs/se...

🚀 Just released [email protected] 📦 🍿 #release details: github.com/expressjs/re...

🚀 Just released [email protected] 📦 🍿 #release details: github.com/expressjs/co...

🚀 Just released [email protected] 📦 🍿 #release details: github.com/expressjs/co...

🚀 Just released [email protected] 📦 🍿 #release details: github.com/expressjs/mo...

🚨 Low-severity security fix in [email protected] just released! - Patches CVE-2025-7339 — vulnerable to http response header manipulation github.com/jshttp/on-he...

🚨 High-severity security fix in [email protected] just released! - Patches CVE-2025-7338 — Denial of Service via unhandled exception from malformed request - All users should upgrade immediately: npm i multer@latest github.com/expressjs/mu...

🚩 Keep up to date with @nodejs.org by watching the #Nodejs Security Working Group's last meeting on YouTube! www.youtube.com/watch?v=_YmV...

My books on #JavaScript and #TypeScript are free to read online: – Exploring JavaScript (ES2025 edition) – Deep JavaScript – Exploring TypeScript (TS 5.8 edition) – Shell scripting with Node.js 🦋 Reposts appreciated! exploringjs.com

📣 Follow the discussion: #Nodejs may move from biannual to yearly major releases to simplify support and ease maintainer workload. 📆 LTS could go from 30 to 24 months 🧩 Odd/even release lines may be unified 🙏 Thanks to @rafaelgss.dev for the proposal! github.com/nodejs/Relea...

The recording of my talk about Temporal from JSNation last month is published! gitnation.com/contents/tem...

What’s our security team been up to in 2025? Just shipping security patches, launching new tools, and leveling up compliance like pros 💪 In 2025, we've been putting in serious work across our projects to improve security, automate releases, and streamline compliance. 📖 openjsf.org/blog/openjs-...

😱 My book Node.js for Beginners is part of the @humblebundle.com + Packt Modern Back-End Web Dev bundle — but it's ending soon! ⏳ Just 1 day left! 📚 Learn #Nodejs, #Python, #Go & more. Support charity while you skill up! www.humblebundle.com/books/modern...

What started as a #POC is now featured on the official @openjs.bsky.social Security page! 🎉 🚀 #OpenPathFinder helps #JavaScript & #NodeJS projects automate security & compliance — and I’m working on exciting updates for [email protected]! openjsf.org/security

In my continued exploration of using Llama Stack with #nodejs this post looks at observability - developers.redhat.com/articles/202...

🚀 Just released [email protected] 📦 🍿 #release details: github.com/expressjs/se...

"It's a reminder that the underlying processes of computers are still made by humans" #save418 save418.com

🚀 Just released [email protected] 📦 🍿 #release details: github.com/jshttp/statu...

npx-safe 👏 👏 👏 www.youtube.com/watch?v=aJNU...

🚩 Keep up to date with @nodejs.org by watching the #Nodejs Security Working Group's last meeting on YouTube! www.youtube.com/watch?v=x0KM...

🔐 We've overhauled how #ExpressJS handles vulnerability reports! New unified policies, GitHub Security Advisories, and a clear workflow—backed by the #SovereignTechFund & @openjs.bsky.social. expressjs.com/2025/06/05/v...

📚 ¡El gran libro de #Nodejs está en la #FeriadelLibroMadrid! 📍 #Caseta365 – ARTCOMBO / SENTIR / MARCOMBO 🗓️ Hasta el 15 de junio 🔖 10% de descuento Una guía moderna para dominar #Nodejs desde cero. ¡Pásate! 🚀

🚨 High-severity security fix in [email protected] just released! - Patches CVE-2025-48997 — a crash triggered by empty field names in multipart uploads - All users should upgrade immediately: npm i multer@latest github.com/expressjs/mu...