--- title: "This Week's Node.js News - Issue 152" publication: "Node Weekly" issue: 152 published_at: "2016-08-25" canonical_url: "https://nodeweekly.com/issues/152" --- This Week's Node.js News - Issue 152 This week's Node news[Read this e-mail on the Web](http://nodeweekly.com/issues/152) Node WeeklyAugust 25, 2016 #152 Guy Podjarny [Controlling The Security Risk of npm Dependencies](https://blog.risingstack.com/controlling-node-js-security-risk-npm-dependencies/)Using npm packages inevitably exposes you to certain security risks. Ask these 7 questions to improve your exposure to common issues. npm, Inc. ['fs' Package Unpublished and Restored](http://status.npmjs.org/incidents/dw8cr1lwxkcr)Many packages accidentally include the ‘fs’ package as a dependency despite being a built-in Node module. This caused major issues when the npm package was deleted. It has since been restored. Vladimir de Turckheim [One Easy Way to Inject Malicious Code in Any Node App](https://blog.sqreen.io/one-easy-way-to-inject-malicious-code-in-any-node-js-application/)“The chain used to include instances of modules can be tampered to allow modification of required dependencies.” One to be aware of, rather than use, of course. ROLLBARSponsor [Find and Fix Node.js Errors Faster (and have fun doing it)](https://rollbar.com/?utm_source=nodeweekly&utm_medium=email-nl&utm_term=nodeweekly_8_25&utm_campaign=nl_sponsorship)Quickly pinpoint what’s broken and why. Get the context and insights to defeat all Node errors. [![ROLLBAR\](https://copm.s3.amazonaws.com/97415127.png)](https://rollbar.com/?utm_source=nodeweekly&utm_medium=email-nl&utm_term=nodeweekly_8_25&utm_campaign=nl_sponsorship) Alex Rudenko [Building A Server-Side App with Async Functions and Koa 2](https://www.smashingmagazine.com/2016/08/getting-started-koa-2-async-functions/)A practical example of building a simple server-side app that tracks page views for static websites, using Koa, a leaner framework than Express. Mikeal Rogers [Node.js Everywhere: How Node Is Continuing to Grow](https://www.youtube.com/watch?v=kLKljFGz2oA)At Node.js Live London, Mikeal Rogers gave a quick 15 minute talk on the growth of Node and where things are headed from the Node Foundation’s point of view. Jobs - [Sr. JavaScript / Ruby Developer](https://www.stickermule.com/jobs?job=714da6cc-dc8b-4453-8bd6-7b0fa41ebd37&title=sr-javascript--ruby-developer) Sticker Mule is looking for passionate engineers to join our remote team. Come help us build the best e-commerce experience using Ruby, Rails, React, Node, Docker and more. Sticker Mule - [Stop Applying to Jobs - Let Companies Come To You](https://hired.com/?utm_source=newsletters&utm_medium=petercooperpress&utm_campaign=q3-16-nodeweekly) On Hired, engineers typically get 5+ job offers in 1 week. Find that new opportunity you've been craving and get access to 4,000+ companies instantly. Hired.com In Brief - [The NodeSource CFP, Calling Node Speakers for 3 US Events](https://nodesource.com/blog/announcing-the-nodesource-cfp/) news Events in Los Angeles, Washington DC, and Seattle in the next several months. Dan Shaw - [Building Your First Atom Plugin](https://github.com/blog/2231-building-your-first-atom-plugin) tutorial A step-by-step tutorial for building a simple plugin in JavaScript for the Atom text editor. GitHub - [Building and Securing a Modern Backend API](https://scotch.io/tutorials/building-and-securing-a-modern-backend-api) tutorial _Note: Leans heavily on the Auth0 service._ Ado Kukic - [Build a REST API for Your Mobile Apps using Node.js](https://stormpath.com/blog/tutorial-build-rest-api-mobile-apps-using-node-js?utm_source=node-weekly&utm_medium=paid-newsletter&utm_campaign=mobile-node-2016) tutorial Learn how to build a REST API to serve as a Node mobile backend then connect it to an Android/iOS app. StormpathSponsor - [The Promises FAQ: Addressing Common Questions About Promises](https://gist.github.com/joepie91/4c3a10629a4263a522e3bc4839a28c83) tutorial Sven Slootweg - [Analyzing Node.js on GitHub with BigQuery](http://jbeckwith.com/2016/08/13/bigquery-github/) tutorial Justin Beckwith - [Emulating a 6502 System in JavaScript](https://www.youtube.com/watch?v=7WuRq-Wmw5o) video Filmed at the GOTO Chicago 2016 conference. _45 minutes_. Matt Godbolt - [slow-deps: CLI Tool to Measure Slow Installing Dependencies](https://github.com/nolanlawson/slow-deps) tools Measure which dependencies in a project are slowest to `npm install`. Nolan Lawson - [NodeSource now offers Containerized N|Solid Deployment for Kubernetes](http://nsrc.io/nsolidkube-nw) tools Production-ready continuous performance and security monitoring for Node.js within a Kubernetes cluster. NodeSourceSponsor - [Moin: A (Very) Simple Node Microservice Server](https://github.com/moinjs/moin) code Watches a ‘services’ directory and reloads modules when they change. - [OpenMCT: Web-Based Mission Control Software by NASA](https://github.com/nasa/openmct) code Yep, Node is being used to keep those rovers trucking. NASA - [Microlock: A Simple Distributed Locking Library for Node and etcd](https://github.com/jobstart/microlock) code Jobstart - [Cloverjs: REST API Framework with TypeScript Decorators Built on Express](https://github.com/zorend/cloverjs) code Oussama Gammoudi - [localstorage-polyfill: An In-Memory localStorage Polyfill for Node](https://github.com/capaj/localstorage-polyfill) code Jiri Spac - [Nucleus: A Living Style Guide Generator for SCSS](https://holidaypirates.github.io/nucleus/) code Nucleus - [Ramme: An Unofficial Instagram Desktop App](https://github.com/terkelg/ramme) code Built using Electron, looks good. Terkel Gjervig - [koa-monitor: Realtime Monitoring for Koa.js Apps](https://github.com/capaj/koa-monitor) code A port of [express-status-monitor](https://github.com/RafalWilinski/express-status-monitor) for [Koa](http://koajs.com/). Jiri Spac - [Neuron: An Offline-First Starter Kit for Electron Apps](https://github.com/JamesTheHacker/Neuron) code Node Weekly is curated by [Peter Cooper](https://twitter.com/peterc) and published by [Cooperpress](https://cooperpress.com/). Want to sponsor an issue? See our [media kit.](https://cooperpress.com/mediakit) Want to post a job? E-mail us or [use our self-serve system.](https://booking.cooperpress.com/jobs) [Unsubscribe](*|UNSUB|*) : [Change email address](*|UPDATE_PROFILE|*) : [Read this issue on the Web](http://nodeweekly.com/issues/152) © Cooperpress Ltd. Office 30, Lincoln Way, Louth, LN11 0LS, UK [Email policy](https://cooperpress.com/spam.html) [Privacy policy](https://cooperpress.com/privacy.html)