--- title: "This Week's Node.js News - Issue 143" publication: "Node Weekly" issue: 143 published_at: "2016-06-24" canonical_url: "https://nodeweekly.com/issues/143" --- This Week's Node.js News - Issue 143 This week's Node news[Read this e-mail on the Web](http://nodeweekly.com/issues/143) Node WeeklyJune 24, 2016 #143 Apologies for the lateness of this issue today - we were awaiting the security releases of Node addressed in the first item below :-) Node.js Foundation [Security Releases: Node 5.12.0, 4.4.6, 0.12.15 & 0.10.46](https://nodejs.org/en/blog/vulnerability/june-2016-security-releases/)Vulnerabilities have been patched in [5.x](https://nodejs.org/en/blog/release/v5.12.0/), [4.x](https://nodejs.org/en/blog/release/v4.4.6/), [0.12.x](https://nodejs.org/en/blog/release/v0.12.15/) and [0.10.x](https://nodejs.org/en/blog/release/v0.10.46/). Node 6 has not been affected, however. John-David Dalton and Bradley Meck [A Proposal for Unambiguous JavaScript Grammar](https://github.com/bmeck/UnambiguousJavaScriptGrammar/blob/master/README.md)A well-informed proposal to resolve standing issues over whether JavaScript files are treated as regular scripts or modules. Karl Düüna [Lessons from Analysing 1.65M Versions of npm Modules](https://blog.nodeswat.com/what-i-learned-from-analysing-1-65m-versions-of-node-js-modules-in-npm-a0299a614318#.u550hvjyg)A look at not only some npm caching and installation concerns, but also licences, freshness, and dependencies of modules overall. HerokuSponsor [Create Lean and MEAN Web Apps and APIs](https://devcenter.heroku.com/articles/mean-apps-restful-api?c=7013A000000mLLiQAM&utm_campaign=Display%20-%20Endemic%20-%20Cooper%20-%20Node%20-%20Blog%20-%20Mean-Stack&utm_medium=display&utm_source=cooperpress&utm_content=blog&utm_term=node)Learn how to build a full stack JavaScript app & RESTful API server you can customize and scale. [Read More.](https://devcenter.heroku.com/articles/mean-apps-restful-api?c=7013A000000mLLiQAM&utm_campaign=Display%20-%20Endemic%20-%20Cooper%20-%20Node%20-%20Blog%20-%20Mean-Stack&utm_medium=display&utm_source=cooperpress&utm_content=blog&utm_term=node) [![Heroku\](https://copm.s3.amazonaws.com/9cf18d7d.png)](https://devcenter.heroku.com/articles/mean-apps-restful-api?c=7013A000000mLLiQAM&utm_campaign=Display%20-%20Endemic%20-%20Cooper%20-%20Node%20-%20Blog%20-%20Mean-Stack&utm_medium=display&utm_source=cooperpress&utm_content=blog&utm_term=node) Guy Podjarny [The 5 Dimensions of an npm Dependency](https://snyk.io/blog/whats-an-npm-dependency/)Guy outlines five different dimensions to thinking about npm dependencies, including development vs production dependencies and versioning issues. The npm Blog [Dealing with Problematic Dependencies in A Restricted Network Environment](http://blog.npmjs.org/post/145724408060/dealing-with-problematic-dependencies-in-a)A look at issues around using certain public packages in a limited-access environment. Adam Baldwin [A Denial of Service Vuln Affecting Express.js](https://medium.com/node-security/regular-expression-denial-of-service-affecting-express-js-9c397c164c43)Upgrade to the newly released 4.14, if possible. If you're using `acceptsLanguages`, you could be vulnerable to a simple attack. Jobs - [TypeScript Developers, AngularJS/Node.js (Flatiron, New York City)](http://www.chkdgt.com/jobs?utm_source=nodenewsletter&utm_medium=email&utm_content=node23&utm_campaign=node23) Our microservices-based transaction processing platform needs people with leading-edge knowledge of infrastructure-as-code, AWS, serverless architectures, full-stack TypeScript and continuous delivery. CHECK DIGIT LLC - [Senior Node Engineer at TES USA (San Francisco, CA or remote)](http://wikispaces.workable.com/jobs/40877) Make a difference in teachers’ lives with a platform that allows them to find, share and sell resources worldwide. Join TES USA’s small, global team to embrace challenges, be part of a lean process, and impact education. TES USA - [Job Offers. No resume necessary.](https://hired.com/?utm_source=newsletters&utm_medium=petercooperpress&utm_term=cat-tech-node&utm_content=noresume&utm_campaign=q2-16-nodeweekly&utm_location=us) Create your Hired profile to get top companies to start applying to hire you. Get offers from $75,000 - $250,000 on the platform in 1 week. Hired.com In Brief - [npm Repository Passes 300,000 Total Packages](http://imgur.com/H3skyhG) news imgur - [Introducing Nova: A New Kind of Back-End for React Apps](http://www.telescopeapp.org/blog/introducing-nova-a-new-kind-of-back-end-for-react-apps/) news tools An update to Telescope. Uses Meteor. Sacha Greif - [Express.js 4.14.0 Released](https://github.com/expressjs/express/releases/tag/4.14.0) news code - [Node v6.2.2 (Current) Released](https://nodejs.org/en/blog/release/v6.2.2/) news A couple of fixes in `http` and npm upgraded to 3.9.5. Node.js Foundation - [[Whitepaper\] 9 Common Node.js Patterns](http://info.appneta.com/9_common_node.js_design_patterns.html?Ref__c=20621) Dive deep into commonly used node.js patterns and how to use them effectively. [Download now.](http://info.appneta.com/9_common_node.js_design_patterns.html?Ref__c=20621) AppNeta APMSponsor - [Integration Testing of a Dockerized Angular App](http://getmesh.io/Blog/Integration+Testing+of+a+Dockerized+Angular+App) tutorial Johannes Schüth - [Run npm Scripts in a Git pre-commit Hook](http://elijahmanor.com/npm-precommit-scripts/) tutorial Elijah Manor - [Scaling A WebSocket Application With RabbitMQ](http://blog.pettigrew.rocks/post/146239405997/scaling-a-websocket-application-with-rabbitmq) tutorial John Pettigrew - [Getting Started with JavaScript Robotics](https://medium.com/@leo/getting-started-with-javascript-robotics-5c54e716562c) tutorial Leo Lamprecht - [Introducing Queues in Node.js](http://blog.yld.io/2016/05/10/introducing-queues/) tutorial Pedro Teixeira - [Build faster Node.js apps](https://opbeat.com/?utm_source=javascriptweekly&utm_medium=newsletter) tools See how your app spends its time (database, cache, external http requests), where it needs optimizing, and who wrote the slow code. OpbeatSponsor - [Apple Pay Merchant Session Server](https://github.com/tomdale/apple-pay-merchant-session-server) code A server for obtaining Apple Pay for the Web merchant sessions. Tom Dale - [Calibre-Serve: A Node.js Calibre (E-Book Reader) API and Server](https://github.com/Xananax/calibre-serve) code - [gitkit-js: A Pure JS Implementation of Git](https://github.com/SamyPesse/gitkit-js) code Samy Pessé - [Kakapo.js: A Next Gen HTTP Mocking Framework](http://devlucky.github.io/kakapo-js) code - [dbq: Terse node-mysql Query Wrapper That Supports Parallel + Series Execution](https://www.npmjs.com/package/dbq) code - [emoj: Find Relevant Emojis From Text on the Command Line](https://github.com/sindresorhus/emoj) code Sindre Sorhus Node Weekly is curated by [Peter Cooper](https://twitter.com/peterc) and published by [Cooperpress](https://cooperpress.com/). Want to sponsor an issue? See our [media kit.](https://cooperpress.com/mediakit) Want to post a job? E-mail us or [use our self-serve system.](https://booking.cooperpress.com/jobs) [Unsubscribe](*|UNSUB|*) : [Change email address](*|UPDATE_PROFILE|*) : [Read this issue on the Web](http://nodeweekly.com/issues/143) © Cooperpress Ltd. Office 30, Lincoln Way, Louth, LN11 0LS, UK [Email policy](https://cooperpress.com/spam.html) [Privacy policy](https://cooperpress.com/privacy.html)