Node v23.2.0 (Current) Released — On paper, a relatively minor release that updates the root certificates, adding five new ones, but development of TypeScript support has now moved into active development (as opposed to ‘early development’) and there’s a new module.stripTypeScriptTypes API.

Antoine du Hamel

Introducing the vlt Package Manager — Made up of an incredibly experienced team, including npm’s creator Isaac Schlueter, Vlt set out to ‘build the future’ of JS package management. The vlt tool, explained here, is the first fruit of the project and acts as ‘a drop-in replacement’ to whatever you’re using now.

Vlt

Key Learnings From the State of DevSecOps Study — To understand the state of DevSecOps adoption in 2024, Datadog evaluated real-world data from thousands of applications. Read the report for key insights on secure application development techniques to improve your security posture.

Datadog sponsor

Node.js v22 Enters Long Term Support (LTS) — This happened in the past couple of weeks, but Lizz has put together a useful update on Node 22’s recent transition to becoming an LTS release and the key features it has baked in.

Lizz Parody (NodeSource)

JavaScript Import Attributes (ES2025) Explained — Import Attributes (currently stage 3 at TC39 but supported in Node) add a way to supply useful metadata about modules you’re importing.

Trevor I. Lasn

Node Implementing Stricter Policies for Pull Requests — To help bolster the stability and security of major releases, the Node team has introduced a stricter policy around semver-major PRs. If such a PR lands on the default branch within a month prior to a major release, it’ll be far less likely to make it in.

Sarah Gooding

🎵 music-metadata: Stream and File-Based Music Metadata Parser — Supporting formats like MP3, FLAC, Ogg, WAV, WMA, AAC and AIFF, this library extracts metadata like ID3v1 and iTunes tags for processing however you want. Supports streaming and has an async API for efficiency.

Borewit

Immutable.js 5.0: Immutable Collections for JavaScript — Provides numerous persistent immutable data structures including a list, stack, map, ordered map, set, ordered set, and records.

Lee Byron and Contributors

Automate Embedding Creation and Syncing in Postgres with pgai Vectorizer — 🚀 pgai Vectorizer automates embedding creation and syncing in Postgres with one SQL command — keeps embeddings updated, no tools needed.

Timescale sponsor

Cron 3.2: Cron-Syntax Job Runner for Node — Execute functions whenever your scheduled jobs (defined using standard cron format) triggers.

Nicholas Campbell

WebAssembly Audio Decoders — Targeting both browser and Node.js use cases, this is a collection of WASM-powered audio decoding libraries for formats like MPEG I/II/III, FLAC, Ogg Opus, Ogg FLAC, Opus, and Ogg Vorbis.

Ethan Halsall

📄 xlsx-parse-table: Parse Tables from Excel Worksheets — Takes a very minimal approach compared to, say, SheetJS.

Jeet Dhandha

graphql-subscriptions: GraphQL Subscriptions for Node.js — Wire up GraphQL with a pub/sub system (e.g. Redis) to implement subscriptions in GraphQL.

Apollo GraphQL Project