--- title: "This Week's Node.js News - Issue 131" publication: "Node Weekly" issue: 131 published_at: "2016-03-31" canonical_url: "https://nodeweekly.com/issues/131" --- This Week's Node.js News - Issue 131 This week's Node news[Read this e-mail on the Web](http://nodeweekly.com/issues/131) Node WeeklyMarch 31, 2016 #131 npm, Inc. [Key Changes to npm's Unpublish Policy](http://blog.npmjs.org/post/141905368000/changes-to-npms-unpublish-policy)The recent events caused by the unpublishing of npm modules has caused some key changes in npm policy that you need to be aware of when publishing your own packages. YouTube [Build a Twitch.tv Chat Bot in 10 Minutes with Node](https://www.youtube.com/watch?v=K6N9dSMb7sM)Short, excellently produced, and does exactly what it says in the title. Eric Kryski [Feathers: A Minimalist Real-Time Framework](http://feathersjs.com/)Wraps over Express and Socket.io, and uses Service Oriented Architecture and concerns for building complex real-time apps and scalable REST APIs quickly with little code. Frontend MastersSponsor [New @getify Course: Rethinking Asynchronous JavaScript](https://frontendmasters.com/courses/rethinking-async-js/)All JS has to deal with asynchrony. And _effective_ async programming means knowing various different patterns and weaving them together to make not only workable but readable and understandable code. _Try out a [free lesson Introducing Thunks](https://frontendmasters.com/courses/rethinking-async-js/thunks/)._ [![Frontend Masters\](https://copm.s3.amazonaws.com/ea5c0648.jpg)](https://frontendmasters.com/courses/rethinking-async-js/) Keith Horwood [CMND: Easily Create A Node Command Line Utility using ES6](https://github.com/keithwhor/cmnd)Easily create CLI tools using idiomatic ES6 syntax. It’s also simple to create associated manual (help) pages for each command. Karl Düüna [How to Implement Access Control in Node](https://blog.nodeswat.com/implement-access-control-in-node-js-8567e7b484d1)A look at what’s involved with access control, some different ways of doing it, and a practical example in Node using [easy-rbac](https://www.npmjs.com/package/easy-rbac). EverythingStays [Everything Stays: Immutable, Distributed Modules](http://everythingstays.com/)“What if we could have immutable modules that are distributed and downloaded from everyone?” A proof of concept using the peer-to-peer [IPFS](https://en.wikipedia.org/wiki/InterPlanetary_File_System) system to store modules. Telerik Developer Network [Is left-pad Indicative of a Fragile JavaScript Ecosystem?](http://developer.telerik.com/featured/left-pad-indicative-fragile-javascript-ecosystem/)Brian Rinaldi, TJ VanToll and Cody Lindley debate the significance of the recent unpublishing of an npm module that caused builds to break across the web. npm, Inc. [An npm Package Install Script Vulnerability](http://blog.npmjs.org/post/141702881055/package-install-scripts-vulnerability)“it is possible for a maliciously-written npm package, when installed, to execute a script that includes itself into a new package that it then publishes to the registry, and to other packages owned by that user.” Jobs - [Lead Node.js Engineer](https://ripple.com/company/careers/all-jobs/?&utm_source=Node.js%20Weekly&utm_medium=email&utm_campaign=Node.js%20Weekly#127063) Ripple is seeking a Lead Node.js Engineer to join our team of developers in creating world-class enterprise products powered by Ripple’s Interledger Protocol. We are looking for passionate individuals to make Interledger payments a reality. Ripple - [Node Skills are in demand](http://www.indeed.com/prime?sid=xp_cooperpress&kw=nodeweekly) Indeed Prime is an elite new program from Indeed.com that presents in-demand tech talent like you to top employers. Indeed Prime opens the door to exciting career opportunities with one simple application. [Join today.](http://www.indeed.com/prime?sid=xp_cooperpress=node) Indeed.com In Brief - [On 'Dependency Squatter' Packages](http://blog.npmjs.org/post/141985926180/on-dependecy-squatter-packages) news opinion Jed Richards - [Meteor JavaScript Framework Moves to NPM](http://www.infoworld.com/article/3048806/javascript/meteor-javascript-framework-moves-to-npm.html) news Paul Krill - [Google Joins The Node.js Foundation](https://nodejs.org/en/blog/announcements/welcome-google/) news Google Cloud Platform, specifically. Node.js Foundation - [New For Express Apps: Faster User Auth, Plus Support For Android & iOS](https://stormpath.com/blog/express-3-release/?utm_source=node-weekly&utm_medium=newsletter&utm_campaign=express-3-release) news Express-Stormpath, updated with faster OAuth2 token auth, mobile support, and handlers for custom workflows. StormpathSponsor - [Building an Expense Tracking App with Electron and React](https://blog.jscrambler.com/building-expense-application-electron-react/) tutorial JScrambler Blog - [A Quick Guide To Reading Node.js Core Source](https://medium.com/@Trott/a-quick-guide-to-reading-node-js-core-source-c968d83e4194) tutorial One person’s approach to understanding the source code that makes up Node.js core. “Your mileage may vary. Warranty void if seal is broken.” Rich Trott - [Building A Web Application with Node and Typescript](http://withouttheloop.com/articles/2016-03-24-node-web-ts/) tutorial Liam McLennan - [The Unbelievable History of the Express Framework](http://thefullstack.xyz/history-express-javascript-framework/) story Dor Tzur - [Making The Switch From Node.js to Golang](https://medium.com/@theflapjack103/the-way-of-the-gopher-6693db15ae1f) opinion The tale of how and why a software engineer at Digg switched to Go, before concluding “For now, Digg is going the way of the Gopher.” Alexandra Grant - [The npm Meltdown Uncovers Serious Security Risks](https://ponyfoo.com/articles/npm-meltdown-security-concerns) opinion Nicolás Bevacqua - [canibekikked: Check If Your NPM Repository Names Are Trademarked](https://github.com/parro-it/canibekikked) tools A slightly tongue-in-cheek response to last week’s ‘kik’ package story. Andrea Parodi - [hotel: Local .dev Domains for Multiple Local Dev Apps](https://github.com/typicode/hotel) tools No need to worry about ports, remember commands, or manage terminal tabs - access and start your dev servers from the browser. typicode - [KeystoneJS: Node CMS and Webapp Framework using Express and Mongoose](http://keystonejs.com/) code Thinkmill - [urlite: Small, Fast, Dependency-Free URL Parser and Formatter](https://github.com/QubitProducts/urlite) code Qubit - [mocha-http-detect: Detect HTTP Requests in Your Mocha Test Suites](https://github.com/Chris911/mocha-http-detect) code Christophe Naud-Dulude - [Looking for a Fullstack JavaScript bootcamp?](https://www.thinkful.com/bootcamps/?utm_source=nodeweekly&utm_campaign=nodeweekly_mar31_16&utm_term=sponsoredlink) course Use Bootcamp Finder to find schools that fit your budget, location, and have great placement stats. ThinkfulSponsor Node Weekly is curated by [Peter Cooper](https://twitter.com/peterc) and published by [Cooperpress](https://cooperpress.com/). Want to sponsor an issue? See our [media kit.](https://cooperpress.com/mediakit) Want to post a job? E-mail us or [use our self-serve system.](https://booking.cooperpress.com/jobs) [Unsubscribe](*|UNSUB|*) : [Change email address](*|UPDATE_PROFILE|*) : [Read this issue on the Web](http://nodeweekly.com/issues/131) © Cooperpress Ltd. Office 30, Lincoln Way, Louth, LN11 0LS, UK [Email policy](https://cooperpress.com/spam.html) [Privacy policy](https://cooperpress.com/privacy.html)