Thursday, 27 May, 2021 UTC


Summary

#​390 — May 27, 2021
Read on the Web
Node Weekly
▶ How To Create Your First Flow in Node-RED — Node-RED is a browser-based ‘flow’ programming environment that uses Node.js under the hood and is particularly popular in enterprise IoT systems but works at small scale too. This hour long screencast presents a thorough introduction into really using it productively.
Bleeding Code
Introducing WebContainers: Running Node.js Natively in the Browser — An interesting new WebAssembly-based operating system that boots instantly and enables Node.js environments to run directly in the browser. People have been getting very excited about this on Twitter. Only supports Chromium-based browsers for now though.
Eric Simons (StackBlitz)
New & Updated Course: Complete Intro to React v6 with Brian Holt — Learn to build real-world applications using modern React. Much more than an intro, you’ll start from the ground up, getting to using the latest features in React, including hooks, effects, context, and portals, plus piecing together tools from the entire React ecosystem.
Frontend Masters sponsor
Vendure v1.0: An Open Source, Node.js E-commerce Framework — It’s TypeScript end-to-end, been under development for three years, and has plenty of documentation.
Michael Bromley
QUICK BITS:
  • A developer has noticed Node's core HTTP server is getting slower release after release? Matteo Collina notes, however, "a huge batch of work was done to make Node.js safer and more robust to attacks".
  • Stack Overflow has opened the 2021 edition of its popular developer survey and you can take it here.
  • It's two years (and one day) since the last formal release of Express.js (4.17.1, specifically). Work on Express 5 continues but the number of developers picking up things like Fastify and Koa continues to grow. We look forward to seeing Express 5 one day, though!
  • Some breaking news today is that Snyk has found supply chain security vulnerabilities in VS Code extensions.
Snyk to Take On Responsibility for Node Ecosystem Vulnerability Disclosure Program — The Node.js project’s ecosystem vulnerability reporting program is being wound down and Snyk is both taking on the process and picking up the current backlog of reports. Note that this does not affect the process of reporting vulnerabilities in Node itself.
Benji Catabi-Kalman (Snyk)
📄 Plaid’s Internal Tooling Dilemma — Plaid used Retool to make 80% faster customer support workflows, while in hyper growth mode. Here’s the story.
Retool sponsor
A Deep Dive into Rust for Node Developers — JavaScript can do pretty much anything, so why learn another language? Rust is a systems language proving powerful in the WebAssembly space, so you may find a use for it in some situations going forward.
Florian GOTO
How to Add Login to a Node App with Cloudflare Argo Tunnels
Phil Wonski
💻 Jobs
Node.js Developer at X-Team (Remote) — Join the most energizing community for developers and work on long-term projects for Riot Games, FOX, Sony, Coinbase, and more.
X-Team
Find Software Engineering Jobs with Hired — Take 5 minutes to build your free profile & start getting interviews for your next job. Companies on Hired are actively hiring right now.
Hired
🛠 Code and Tools
supported by
ts-node 10.0: TypeScript Execution and REPL for Node — If you’d rather not use Deno but you want a TypeScript-based REPL for Node, this is for you. GitHub repo.
TypeStrong
milliparsec: A Small, Dependency Free Body Parsing Library — Submitted by a reader, this came with the promise that “Milliparsec is the tiniest body parser in the universe.” There’s a Deno port too.
v 1 r t l
[New] Free JavaScript Code Quality & Security Scanner - Real‑Time Scan
Snyk sponsor
node-notifier 10.0: Cross Platform Native Notifications from Node — Send native notifications on macOS, Linux or Windows with this.
Mikael Brevik
🛠 OTHER UPDATED PACKAGES TO CHECK OUT
  • Verdaccio 5.1 – A lightweight private proxy registry.
  • fdir 5.1 – High performance directory crawler & globbing library.
  • Async Redis 2.0 – Wrapper over node_redis with first class async support.
  • Zapatos 3.6.0 – Zero-Abstraction Postgres for TypeScript.