#​613 — February 26, 2026

Read on the Web

Together with  Clerk
Node.js Weekly

AdonisJS v7 Released: 'Batteries-Included' Node.js Framework — A popular webapp framework that includes auth, ORM, queues, testing, etc. in a cohesive fashion. With v7 comes an all new web site, modernizations, OpenTelemetry integration, new starter kits to rapidly build new apps, barrel file generation, and end-to-end type safety.

Harminder Virk

💡 If you already use Adonis, there's a v6 to v7 upgrade guide.

Clerk Kills Credential Stuffing with Client Trust — Valid password + new device + no MFA enabled = Clerk automatically requires a second factor. Attackers using leaked credentials always fail because they're always on a new device. Zero config. Free on every plan.

Clerk sponsor

IN BRIEF:

How to Prevent Path Traversal Attacks in Node — Path traversal attacks abuse specially crafted file paths to reach files an app didn't intend to expose. Luciano demonstrates a complete scenario, explores mitigations in depth, and includes a handy TLDR if you just want the essentials.

Luciano Mammino

🤖 Getting Started with the Vercel AI SDK in Node — It provides a more abstract way to work with various AI API providers than jumping around different provider libraries.

Valeri Karpov

Adding a Database Is Easier Than Removing One — Extend the one you have instead. TimescaleDB adds hypertables, 95% compression, and continuous aggregates. Try free.

Tiger Data (creators of TimescaleDB) sponsor

📄 Git's Magic Files – Useful guide to the many files that influence git's behavior in areas like ignoring files, language detection, and pre-filling commit messages. Andrew Nesbitt

📄 Why JavaScript Needs Structured Concurrency – And how Effection can provide it. Taras Mankovski

📄 How to Publish to npm from GitHub Actions – Using the new npm OIDC trusted publishing workflow. Gleb Bahmutov

🛠 Code & Tools

numpy-ts: A NumPy Implementation for TypeScriptNumPy is a fundamental piece of the Python scientific computing ecosystem and well-entrenched in many use cases. JavaScript has some options in this regard (e.g. TensorFlow.js), but numpy-ts is an attempt to replace the NumPy experience as closely as possible (currently at 94% API coverage). There’s an online playground if you want to give it a quick spin.

Nicolas Dupont

Edge: A JS-Like Template Engine for Node — A template engine that tries to stick as closely to JavaScript as possible, so you don’t have to learn a lot of new syntax for writing logic into your views (as you do with Nunjucks or Pug, say).

Harminder Virk

bignumber.js 10.0: Library for Arbitrary-Precision Arithmetic — Works around limitations of JavaScript’s Number and BigInt types, such as if you need to work with very large non-integers. Usefully, the library is included on the page so you can play with it in the JS console.

Michael Mclaughlin

  • Emscripten 5.0.2 – The long-standing LLVM to WebAssembly compiler, which can be used to bring native, low-level code into Node without needing native bindings, gets some cleanups for no-longer-necessary Node hacks.

  • Hono 4.12 – The multi-runtime, Web Standards-based web framework.

  • BullMQ v5.70 – Fast, reliable Redis-based distributed queue for Node.

  • Orange ORM 5.2 – Powerful ORM library.

  • Basic FTP 5.2 – A simple FTP client library.

  • ESLint 10.0.2

📰 Classifieds

🚀 HTML to PDF made easy. One simple API that scales. PrinceXML under the hood for full CSS & JS support. EU-hosted, free to start.

📢  Elsewhere in the ecosystem