#​601 — November 18, 2025

Read on the Web

Together with  Memetria
Node.js Weekly

Node.js v25.2.1 (Current) Released (and 25.2.0 with Type Stripping Marked 'Stable')v25.2.0 was released hours after we hit send last week (often the way!) and marked type stripping as stable, meaning all major server-side runtimes now support TypeScript officially (at least in type-stripping form). v25.2.1, on the other hand, reverts a spec-compliance issue where localStorage access can throw an exception (which will be pushed back to v26).

Antoine du Hamel

Real-Time Redis Visibility for Node Apps — Memetria K/V turns Redis metrics into insight. Track memory growth, large keys, and latency in real time — all from a dashboard designed for Node.js developers running Redis OSS or Valkey at scale.

Memetria sponsor

Comparing Electron vs. Tauri for Building and Distributing a Desktop App — A team working on an open-source desktop app built using JavaScript and Electron took a look into the Rust-based Tauri instead, with mixed, but mostly positive, results (while still being able to write their app mostly in JavaScript).

Eric Richardson

IN BRIEF:

V8's Garbage Collector Developments in Recent Years — Andy, who’s worked on both V8 and JavaScriptCore in the past, reviews the major developments in the V8 engine’s garbage collector over the past couple of years. Very technical, but a valuable slice of history.

Andy Wingo

Automated NPM Secret Rotation in GitHub Actions — If you’ve built a system to automatically publish to npm, you may have had to change things due to this month’s npm security changes. Here’s a way to keep things ticking if you’re not ready to switch to trusted publishing.

Michael Heap

📄 How to 'Officially' Deprecate Methods with Node.js Utilities – Did you know Node has a deprecate method? Stefan Judis

📄 Tinyglobby: A Success Story in Modernization and Performance Madeline Gurriarán

📄 The IndonesianFoods TEA Theft: Analyzing an NPM Spam Campaign Staicu and Raj (Endor Labs)

📄 Several Tips for Secure Coding in JavaScript Tanya Janca

🛠 Code & Tools

Inquirer.js 13.0: A Collection of Common Interactive CLI Controls — Want to ask your users questions? Select from predefined options? Enter a password? Check boxes? Inquirer is a good way to do that. v13 is a ‘modernization’ of the codebase which is now ESM only (no CommonJS) and removes a variety of deprecations. Yoctocolors also gets dropped for Node’s own styleText.

Simon Boudrias

Build a JSON-to-PDF Workflow for Your App — Learn how to generate PDFs programmatically — ideal for quotes, receipts, or contracts. No setup headaches.

Foxit Software sponsor

Globby 16.0: User-Friendly Glob Matching — Give it an array of globs and it returns an array of matching paths. It supports negations (including negation-only patterns in v16) and can also respect .gitignore files (and, new in v16, .gitignore files in parent directories too).

Sindre Sorhus

node-libcurl 5.0: libcurl Bindings for Nodelibcurl is a very powerful and established way to fetch data from URLs across numerous protocols (HTTP, IMAP, SCP, SFTP, LDAP etc.) v5.0 upgrades to libcurl 8.17.0 and pre-built binaries now have HTTP/3 support enabled across all platforms.

Jonathan Cardoso Machado

📊 Ackee 3.5: A Self-Hosted, Node-Based Web Analytics System — Last week we mentioned Umami but Ackee is another long standing option powered by Node for self-hosted Web analytics. GitHub repo.

Tobias Reich

Marked.js 17.0: A Fast Markdown Parser and Compiler — A low level Markdown compiler built for speed and available as a client-side library, server-side library, and even a CLI.

Christopher Jeffrey

  • pnpm 10.22 – Fast, space efficient package manager. Adds a trustPolicyExclude option to specify packages that should be installed in spite of any other trust policy requirements.

  • MikroORM 6.6 – TypeScript ORM for Node.js based on Data Mapper, Unit of Work and Identity Map patterns. Now offering more control over filters on relations, as well as private property accessors.

  • 🤖 OpenAI Node 6.9 – The official Node library for OpenAI's adds support for the newly released GPT-5.1.

  • ESLint v10.0.0 Alpha 0 – Get an early look at the breaking changes in the next major release.

  • LogTape 1.2 – Simple logging library for all major JS runtimes. Changelog.

  • pg-boss 12.2 – Postgres-based job queuing system for Node.js.

  • Mercurius 16.6 – Implement GraphQL servers on top of Fastify.

  • FoalTS 5.1 – Full-featured Node.js app framework.

📰 Classifieds

✍️ Add e-signatures to your Node.js app in minutes with the BoldSign Node.js SDK—powered by our e-signature API. Get your free API key today.


The Road to Next is a course by Robin Wieruch for learning full-stack web development with Next.js 15 and React 19. The perfect match for JavaScript developers ready to go beyond the frontend.

📢  Elsewhere in the ecosystem

A roundup of some other interesting stories in the broader landscape: