---
title: "WebSockets, environment variables, and Node app security"
publication: "Node Weekly"
issue: 229
published_at: "2018-03-15"
canonical_url: "https://nodeweekly.com/issues/229"
---

The latest Node.js news, articles, tools, and projects.       

#229 — March 15, 2018 

[Read on the Web](https://nodeweekly.com/issues/229)   

Node Weekly  

[Awesome Node: 600+ Packages, Resources and Links](https://github.com/sindresorhus/awesome-nodejs) — The definitive, categorized list of Node resources and handy links continues to be updated and has passed 600 items. 

Sindre Sorhus   

[Should Node Add WebSocket Support to Core?](https://github.com/nodejs/node/issues/19308) — Node developers are revisiting the idea of adding WebSocket support as a standard part of the official Node distribution. Show your support (or otherwise). 

Myles Borins   [![\](https://copm.s3.amazonaws.com/f79d251d.png)](https://frontendmasters.com/courses/api-node-rest-graphql/) 

[New Course: REST & GraphQL API Design in Node.js, v2](https://frontendmasters.com/courses/api-node-rest-graphql/) — Create an API from the ground up using Node.js, Express and MongoDB. In this course, you'll build a production-ready REST API, and migrate it over to GraphQL. 

Frontend Masters sponsor   

[How You Can Use Environment Variables in Node](https://medium.freecodecamp.org/heres-how-you-can-actually-use-node-environment-variables-8fdf98f53a0a) — What are they? And what are some better ways to handle ‘env’ variables? Burke introduces [dotenv](https://github.com/motdotla/dotenv), a way to make environment variable management easier, and shows how to use them alongside VS Code. 

Burke Holland   

[How Some Node Projects Address Security Challenges](https://medium.com/the-node-js-collection/nodejs-platform-hardening-71b212fcae6a) — An introduction to the [Node.js Security Roadmap](https://nodesecroadmap.fyi/), an online book/set of articles of Node-oriented security ideas and advice. 

Mike Samuel   

[TypeScript Starter 2.0: CLI Tool to Generate New Node Projects](https://github.com/bitjson/typescript-starter) — An interactive project generator that sets up a variety of module and tool related defaults (linting, testing) for new Node projects. 

Jason Dreyzehner   

[GraphQL over REST with Node, Heroku, and Apollo Engine](https://dev-blog.apollodata.com/graphql-over-rest-with-node-heroku-and-apollo-engine-fb8581f8d77f) — Build and deploy a GraphQL API quickly without rewriting your backend by wrapping REST endpoints using Node and Apollo Server. 

Sashko Stubailo   

[npm 5.8.0(-next.0) Released](http://blog.npmjs.org/post/171813275740/v580-next0) — Lots of tweaks and improvements mostly from community contributors. Remember that as a ‘next’ release, this is for testing and development use, not to throw into production ASAP. 

The npm Blog news   

[JS Interactive Call for Proposals Open](https://events.linuxfoundation.org/events/js-interactive-2018/program/cfp/) — Want to speak at one of the world’s biggest JS events? Submit a proposal here. It takes place in Vancouver, Canada on October 10-12 and the CFP closes on April 20. 

Linux Foundation Events news   

[A Brief History of DevOps, Part IV: Continuous Delivery and Deployment](https://circleci.com/blog/a-brief-history-of-devops-part-iv-continuous-delivery-and-continuous-deployment/?utm_source=cooperpress&utm_medium=newsletter&utm_campaign=march18&utm_content=node-weekly) 

CircleCI sponsor   

[Dawn of the Dead Packages](https://www.react-reveal.com/blog/npm/) — In short, the npm site’s autosuggestions are.. not great, as old packages can pop up higher than you'd expect. 

Roman Nosov opinion  

Talks and Screencasts 🎬  

▶[An Introduction to Web Page Scraping with Node and Cheerio](https://www.youtube.com/watch?v=eUYMiztBEdY) — 27 minutes.   

▶[A Gentle Introduction to Express.js and RESTful APIs](https://www.youtube.com/watch?v=pKd0Rpw7O48) — Excellent for beginners. 58 minutes.   

▶[How to Control a Tesla Car with Profound.js](https://www.youtube.com/watch?v=mANP56aKIwM) — 6 minutes.   

Jobs 👩‍🔧  

[Sr. Fullstack Engineer (Remote)](https://www.stickermule.com/careers) — Sticker Mule is looking for passionate developers to join our remote team. Come help us become the Internet’s best place to shop and work. 

Sticker Mule   

[Find a Job You're Passionate About](https://www.vettery.com/tech?utm_medium=cooper-nodeweekly&utm_campaign=ad-9313&utm_source=newsletter&utm_content=grouped&utm_term=tech) — Vettery connects you directly to hiring managers at over 4,000 top companies. Make a profile today and land your dream job. 

Vettery  

Tools and Code 🔧  

[Emma: A Command Line Assistant to Find and Install Packages](https://github.com/maticzav/emma-cli) — Uses an Algolia-powered search to find packages. 

Matic Zavadlal   [![\](https://res.cloudinary.com/cpress/image/upload/c5ojndhl6no86jt3xpj7.png)](https://github.com/maticzav/emma-cli) 

The Emma package search tool in action   

[Wunderbar: Simple Horizontal Bar Charts on the Terminal](https://github.com/gribnoysup/wunderbar) 

Sergey Petushkov   

[turbo-ws: A 'Blazing Fast' Low-level WebSocket Server](https://github.com/hugmanrique/turbo-ws) — Can support thousands of connections with minimal CPU or memory impact. 

Hugo Manrique   

[Fix JavaScript Bugs Like a Boss 🛠](https://rollbar.com/error-tracking/javascript/?utm_source=nodewkly&utm_campaign=nodewkly&utm_medium=email-nl) 

ROLLBAR sponsor   

[nan: Native Abstractions for Node](https://github.com/nodejs/nan) — C header files to make cross-version Node add-on development easier. 

Node.js Foundation   

[Discord.js: A Library for Interacting with Discord's API](https://github.com/discordjs/discord.js) — [Discord](https://discordapp.com/) is a popular chat service and this will help you build bots or similar tools. 

Amish Shah   

[async-exit-hook: Run Some Code When a Node Process Exits](https://github.com/tapppi/async-exit-hook) 

Tapani Moilanen         

Curated by [Cooperpress](https://cooperpress.com/) and [Peter Cooper](https://twitter.com/peterc)
Node.js is a trademark of Joyent, Inc. and is used with its kind permission. 

[Change your email address](https://nodeweekly.com/edit_subscription/*|UID|*) or[Stop getting this newsletter](https://nodeweekly.com/leave/*|UID|*) 

© Cooper Press Ltd · Fairfield Enterprise Centre, Louth, LN11 0LS, United Kingdom