--- title: "A Must-See Node 10 and npm 6 Special" publication: "Node Weekly" issue: 235 published_at: "2018-04-26" canonical_url: "https://nodeweekly.com/issues/235" --- The latest Node.js news, articles, tools, and projects. #235 — April 26, 2018 [Read on the Web](https://nodeweekly.com/issues/235) Node Weekly Node 10 and npm 6.0 Have Been Released It's a big week for the Node world with [the final release of Node 10.](https://nodejs.org/en/blog/release/v10.0.0/) It's _not_ an LTS release (that happens in October) or intended for your production servers yet, but 10.x takes some vital steps forward to help Node continue to grow, so get testing on it ASAP. [The Official Node 10 Release Post](https://nodejs.org/en/blog/release/v10.0.0/) — This is essentially just a changelog and links to the release downloads, so if you want to learn more about what Node 10 is above, keep scrolling. James M Snell [The Node.js Project Introduces Latest Release Line: Node 10](https://medium.com/the-node-js-collection/the-node-js-project-introduces-latest-release-line-node-js-10-x-bf07abfa9076) — A roundup of what’s new to Node 10 from the Node.js Foundation themselves. Node.js Foundation [![\](https://copm.s3.amazonaws.com/e8dffb76.png)](https://www.sencha.com/products/extjs/?utm_source=cooperpress-nw&utm_medium=tpe&utm_campaign=pt-sncextjs&utm_content=042618-pt-sncextjs) [Ext JS: Developer-friendly & Enterprise-ready Framework for Your App Dev](https://www.sencha.com/products/extjs/?utm_source=cooperpress-nw&utm_medium=tpe&utm_campaign=pt-sncextjs&utm_content=042618-pt-sncextjs) — Sencha’s time-tested JavaScript framework, Ext JS, provides a broad range of widgets and over 115 components designed and tested for compatibility with no external dependencies. Try it for free today and see why 60% of the Fortune 100 choose Ext JS. Sencha sponsor **Some more on what's new in Node 10:** - It uses [V8 6.6](https://v8project.blogspot.com/2018/03/v8-release-66.html) which improves `Function.prototype.toString()`, caches code _after_ execution, compiles bytecode on a background thread, offer async performance improvements for promises, Arrays, and more. - the N-API 'Native API' is now stable/non-experimental - this makes it easier to build native addons that can target Node generally rather than have to worry about V8 or version concerns, and essentially Node core can become 'neutral' to the engine behind it - [more here.](https://medium.com/the-node-js-collection/n-api-next-generation-node-js-apis-for-native-modules-169af5235b06) - there's also [a Node-Chakracore release](https://nodejs.org/download/chakracore-release/v10.0.0/) that uses Microsoft's JavaScript engine instead of V8 - [The Buffer constructor has been deprecated](https://nodesource.com/blog/understanding-the-buffer-deprecation-in-node-js-10) (mostly) - It adopts of standardized ['error codes'](https://medium.com/the-node-js-collection/node-js-errors-changes-you-need-to-know-about-dc8c82417f65) - OpenSSL 1.1 support - which means TLS 1.3 support soon - Experimental promisified versions of `fs` functions in `fs/promises` - Node 10 supports [lots of new regex features](https://mathiasbynens.be/notes/es-regexp-proposals) - HTTP/2 support, which will continue to be extended as 10.x progresses - We can now [use async iteration natively](http://2ality.com/2018/04/async-iter-nodejs.html) - It comes with npm 5.6, but 6.0 is available if you want to try it (see below) [npm@6 Announced: Another Major Update to npm](https://blog.npmjs.org/post/173260195980/announcing-npm6) — npm 6.0 _isn’t_ included with Node 10 yet, but you can play with it today. Beyond the usual performance improvements (up to 17x faster than npm a year ago), npm 6 focuses heavily on security and soon _“every user of the npm Registry will begin receiving automatic warnings if you try to use code with a known security issue.”_ A new `npm audit` command will also soon let you recursively analyze dependencies for security issues. The npm Blog [The New npm CLI: A Year in Review; Or, What You May Have Missed](https://blog.npmjs.org/post/173240511455/the-new-npm-cli-a-year-in-review-or-what-you) — A more accessible roundup of what’s new to npm at the CLI level since version 5 was released a year ago, including `npx` and `npm ci`. It’s worth brushing up on if you haven’t done so recently. The npm Blog [Beyond npm@6: The Future of the npm CLI](https://blog.npmjs.org/post/173239798780/beyond-npm6-the-future-of-the-npm-cli) — We’ve just looked at the present and the past of npm, but what about the future? Here’s some of what’s being considered for npm 7. The npm Blog Jobs [Advanced Backend Software Engineering @ London (UK) CyberSec Co.](https://tessian.workable.com/jobs/487077) — We’re building a high-performance core Node backend for our cybersecurity platform; Experience in Node/C++/C#/Java? Join us. TESSIAN [Open To New Opportunities Working With Node?](https://underdog.io/?utm_medium=advertisement&utm_source=nodeweekly&utm_campaign=homepage2018-apr-26&utm_content=new-job) — Try Underdog.io, where hundreds of the best tech companies go to meet top engineers. Apply in 60 seconds. Open in NY, SF Bay Area, and for remote. Underdog.io 📖 Articles and Tutorials [Essential Tools for Versioning and Releasing Your npm Modules](https://hackernoon.com/these-6-essential-tools-will-maintain-your-npm-modules-for-you-4cbbee88e0cb) — Covers semantic-release, Commitizen, Jest, Codecov, ESLint and GreenKeeper. Patrick Lee Scott [Dynaflow: An Open-Source Node Driver for DynamoDB](https://medium.com/vicetech/dynaflow-our-open-source-node-driver-for-dynamodb-dc05f24c5fcd) — [DynamoDB](https://aws.amazon.com/dynamodb/) is AWS’s longest serving NoSQL database service and this is the story of why Vice Tech built a Node driver for it. Joshua Wise [Learn 100+ Azure Tips and Tricks for Web Apps, Databases and More](http://azuredev.tips) AZURE sponsor [Installing Node.js on Linux with 'snaps'](https://nodesource.com/blog/installing-nodejs-tutorial-using-snaps-on-linux/) — ‘Snaps’ are containerized packages designed to work across cloud, desktop, and IoT devices. Eric O'Rear [A Complete Introduction to Async Functions and ES6 Modules in Node](https://blog.sourcerer.io/complete-introduction-to-async-functions-and-es6-modules-in-node-js-9f59887ba531) David Herron 🔧 Code and Tools [Permit: An Unopinionated Auth Library for Node.js APIs](https://github.com/ianstormtaylor/permit) — A library for adding an authentication layer to Node-built HTTP APIs, whether in Express, Koa, Hapi, etc. or using REST or GraphQL. Ian Storm Taylor [lru-cache-node: A Fast Cache Manager for Node](https://github.com/arbazsiddiqui/lru-cache-node) — Has a least-recently-used policy so once the cache is ‘full’, the least recently used items get dropped. Arbaz Siddiqui [PKI.js: Tools for Working with Public Key Infrastructure](https://github.com/PeculiarVentures/PKI.js) — Pure JS library for working with signing, encryption, certificate requests, OCSP and TSP requests/responses Yury Strozhevsky [Slugify: Simply Turns Strings into URL/Filename-Friendly 'Slugs'](https://github.com/sindresorhus/slugify) — e.g. ‘I ♥ Dogs’ becomes ‘i-love-dogs’ Sindre Sorhus [Hazelcast IMDG Node.js Client Code Reference Card](https://hazelcast.com/resources/node-js-code-reference-card/) — Get up and running quickly with the Hazelcast IMDG Node.js Client with this easy to use reference card. Hazelcast sponsor [Emittery: A Simple, Modern Async Event Emitter](https://github.com/sindresorhus/emittery) Sindre Sorhus [TypeORM 0.2: A Powerful ORM for TypeScript and JavaScript](http://typeorm.io/#/) — Supports both Active Record and Data Mapper patterns and many database types. [0.2](https://medium.com/typeorm/typeorm-0-2-0-released-2f49d41c4fa1) adds Electron and React Native support and more. Umed Khudoiberdiev P.S. [Stop using Node 4 ASAP.](https://medium.com/the-node-js-collection/april-2018-release-updates-from-the-node-js-project-71687e1f7742) It's not going to get any more security updates from next Monday onward. Curated by [Cooperpress](https://cooperpress.com/) and [Peter Cooper](https://twitter.com/peterc) [Change your email address](https://nodeweekly.com/edit_subscription/*|UID|*) or[Stop getting this newsletter](https://nodeweekly.com/leave/*|UID|*) © Cooper Press Ltd · Fairfield Enterprise Centre, Louth, LN11 0LS, United Kingdom