--- title: "A checklist of Node.js security best practices" publication: "Node Weekly" issue: 249 published_at: "2018-08-02" canonical_url: "https://nodeweekly.com/issues/249" --- The latest Node.js news, articles, tools, and projects. #249 — August 2, 2018 [Read on the Web](https://nodeweekly.com/issues/249) Node Weekly [Node.js is the ecosystem of choice](https://serverless.com/blog/2018-serverless-community-survey-huge-growth-usage/#that-daily-serverless-development-life) for the majority of serverless development, and so it seems barely a week can go by without us including a serverless-related link in Node Weekly. If serverless development interests you, [check out our serverless newsletter](https://serverless.email/) – there's a lot going on in the space for Node developers :-) _— Peter Cooper, editor_ [Clinic Bubbleprof: A New Way To Visualise Node Code](https://www.nearform.com/blog/introducing-clinic-bubbleprof-a-unique-way-to-visualise-node-js-code/) — From the creators of [Node Clinic](https://www.nearform.com/blog/introducing-node-clinic-a-performance-toolkit-for-node-js-developers/) comes a new, open source visualization tool for profiling your Node code. nearForm [A Checklist of 23 Node.js Security Best Practices](https://medium.com/@nodepractices/were-under-attack-23-node-js-security-best-practices-e33c146cb87d) — A curated list of 23 high-level Node security best practices with code examples and quotes from the top ranked blogs. Yoni Goldberg, Kyle Martin and Bruno Scheufler [![\](https://copm.s3.amazonaws.com/48d39e08.png)](https://start.sentry.io/for/node?utm_source=advertisement&utm_medium=display&utm_content=nodeweekly&utm_campaign=sponsorship) [Save Weeks Per Year Fixing Unseen Bugs in Your Node App with Sentry](https://start.sentry.io/for/node?utm_source=advertisement&utm_medium=display&utm_content=nodeweekly&utm_campaign=sponsorship) — Relying on users to report errors? Use Sentry to cut time to resolution from 5 hours to 5 minutes. Eliminate noise and route alerts to the right person or team based on the commit. Sentry is open source and loved by 500K developers. [Sign up for free](https://start.sentry.io/for/node?utm_source=advertisement&utm_medium=display&utm_content=nodeweekly&utm_campaign=sponsorship). Sentry sponsor [Fusion.js: A Plugin-based Universal Web Framework from Uber](https://eng.uber.com/fusionjs/) — Uber builds and maintains hundreds of Web apps, both internal and public, and Fusion.js is their answer to the challenges this presents. It comes with hot module reloading, data-aware server-side rendering, and bundle splitting out of the box. Leo Horie [Node v10.8.0 (Current) Released](https://nodejs.org/en/blog/release/v10.8.0/) — Lots of minor fixes as usual, with the only noteworthy update being npm upgrading to v6.2. Node.js Foundation [Node Passes 1 Billion Downloads](https://twitter.com/bitandbang/status/1024024311395377153) — 1,166,466,998 as of this Monday, in fact - made up of both direct downloads and Docker image downloads. Tierney Cyren on Twitter 💻 Jobs [Node.js Developer at X-Team (Remote)](https://x-team.com/remote-nodejs-developer-jobs/?utm_source=cooperpress&utm_medium=email-ad&utm_campaign=node) — We help our developers keep learning and growing every day. Unleash your potential. Work from anywhere. [Join X-Team](https://x-team.com/remote-nodejs-developer-jobs/?utm_source=cooperpress&utm_medium=email-ad&utm_campaign=node). x-team [Join Our Career Marketplace & Get Matched With a Job You Love](https://www.hired.com/node) — Through Hired, software engineers have transparency into salary offers, competing opportunities and job details. Hired 📘 Tutorials [Web Scraping with a Headless Browser: A Puppeteer Tutorial](https://www.toptal.com/puppeteer/headless-browser-puppeteer-tutorial) — Some examples of how to control Google Chrome with Puppeteer to take screenshots and gather structured data. Nick Chikovani [Using Sequelize.js and SQLite in an Express.js App](http://stackabuse.com/using-sequelize-js-and-sqlite-in-an-express-js-app/) Adam McQuistan [How To Develop a Node.js TCP Server App using PM2 & Nginx](https://www.digitalocean.com/community/tutorials/how-to-develop-a-node-js-tcp-server-application-using-pm2-and-nginx-on-ubuntu-16-04?utm_source=paid_newsletter+node+weekly&utm_medium=display&utm_campaign=2018_Brand&utm_content=8-2-18+node+weekly+cooperpress) DigitalOcean sponsor [How to Make a Tiny npm Package and Publish It](https://medium.freecodecamp.org/how-to-make-a-beautiful-tiny-npm-package-and-publish-it-2881d4307f78) — A gentle walkthrough very much aimed at beginners. Jonathan Wood beginner [Unit Testing for Node.js Serverless Framework Projects with Jest](https://serverless.com/blog/unit-testing-nodejs-serverless-jest/) Eslam Hefnawy [How To Create an Instagram Bot with Node](https://hackernoon.com/how-to-create-an-instagram-bot-with-node-js-a289185a7d6f) Maciej Cieślar ▶[A Day in The Life of a Node.js Core Contributor](https://www.youtube.com/watch?v=dICWa7cwbdA) — See behind the curtain on how things work within the Node.js core project, how decisions are made, and insights into how to get involved yourself. James M Snell [The Age of "Node.js and…"](https://nodesource.com/blog/the-age-of-node-js-and) — _“Node.js is so ubiquitous that it’s become an accepted, invisible element of the development workflow. It’s not the_ only _platform, but it is a_ universal _platform.”_ Tierney Cyren opinion 🔧 Code and Tools [UPASH: Unified API for Password Hashing Algorithms](https://github.com/simonepri/upash) — The goal of this new project is to present a clean and easy-to-use API to use any password hashing algorithm seamlessly. Simone Primarosa [Monitoring, Alerting, and Distributed Tracing for Node Apps](https://www.datadoghq.com/dg/apm/node-tracing/?utm_source=Advertisement&utm_medium=CooperPress&utm_campaign=CooperPress-NodeWeeklyAPMS) — Datadog APM now fully supports monitoring and trace analytics for Node.js applications. [Try it free](https://www.datadoghq.com/dg/apm/node-tracing/?utm_source=Advertisement&utm_medium=CooperPress&utm_campaign=CooperPress-NodeWeeklyAPMS). Datadog sponsor [uuid-mongodb: Generates and Parse MongoDB BSON UUIDs in Node.js](https://github.com/cdimascio/uuid-mongodb) — Generates and parses BSON UUIDs for use with MongoDB as BSON UUIDs provide better performance than their string counterparts. Carmine DiMascio [Taskbook: Command-Line Tasks, Boards and Notes Manager](https://github.com/klauscfhq/taskbook) — Manage lists and tasks right from the terminal. Klaus Sinani [Vialer-js: An Open-Source WebRTC Communication Platform](https://github.com/vialer/vialer-js) Vialer Curated by [Cooperpress](https://cooperpress.com/) and [Peter Cooper](https://twitter.com/peterc) [Change your email address](https://nodeweekly.com/edit_subscription/*|UID|*) or[Stop getting this newsletter](https://nodeweekly.com/leave/*|UID|*) © Cooper Press Ltd · Fairfield Enterprise Centre, Louth, LN11 0LS, United Kingdom