---
title: "Meetups, diffing npm packages, regex vulnerabilities, and more."
publication: "Node Weekly"
issue: 277
published_at: "2019-02-28"
canonical_url: "https://nodeweekly.com/issues/277"
---

The latest Node.js news, articles, tools, and projects.       

#277 — February 28, 2019 

[Read on the Web](https://nodeweekly.com/issues/277)   

Node Weekly 

[![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60/figpbbozgmjfyxzi6f4e.jpg)](https://medium.com/intrinsic/introducing-package-diff-for-npm-e6487cc9b434)   

[Package Diff: A Way to `diff` npm Packages](https://medium.com/intrinsic/introducing-package-diff-for-npm-e6487cc9b434) — A tool for displaying visual diffs between published releases of an npm package. 

Thomas Hunter II   

[Zero Server: A 'Zero Configuration' Web Framework](https://zeroserver.io/) — As [Parcel](https://parceljs.org/) was to bundlers, so Zero appears to be to Web frameworks. Zero lets you build an app with Node, React, MDX, and more, without worrying about package management _or_ routing. 

Remote Interview, Inc.   [![\](https://copm.s3.amazonaws.com/fecbf02a.png)](https://slackfrontiers.com/2019?utm_medium=email&utm_source=cooperpress&utm_campaign=fy20q102-cooperpress-frontiers) 

[Frontiers 2019: Explore New Ways to Build Apps on Slack](https://slackfrontiers.com/2019?utm_medium=email&utm_source=cooperpress&utm_campaign=fy20q102-cooperpress-frontiers) — Teams move faster with apps on Slack. And, it wouldn’t be possible without the people who built them. Connect with app builders like you, get hands-on training and spark new ideas at Frontiers 2019. 

Slack sponsor   

[February 2019 Security Releases Available](https://nodejs.org/en/blog/vulnerability/february-2019-security-releases/) — New releases of all supported release lines are out today (specifically, 11.10.1, 10.15.2, 8.15.1, and 6.17.90) to fix two 'low' severity vulnerabilities. 

Node.js Foundation   

[The Node.js Benchmarking Working Group: Measuring Performance for a Speedier Node](https://medium.com/the-node-js-collection/the-node-js-benchmarking-working-group-measuring-performance-for-a-speedier-node-js-76520995d2d1) — The Node.js Benchmarking Working Group is dedicated to monitoring Node’s performance and helping in the efforts to improve it. This is only a brief intro to what they do but you’re encouraged to join the effort. 

Node.js Foundation   

[ReDoS Vulnerabilities in `npm` Spikes by 143% and XSS Continues to Grow](https://snyk.io/blog/redos-vulnerabilities-in-npm-spikes-by-143-and-xss-continues-to-grow/) — Snyk has done some analysis of vulnerabilities in the npm package ecosystem, and both disclosed regular expression denial of service (ReDoS) and XSS vulnerabilities are on the rise. 

Liran Tal   

[A List of 55 Node.js Meetups](https://github.com/nodejs/nodejs.org/blob/master/locale/en/get-involved/node-meetups.md) — Want to meet up with fellow Node developers? Here’s a list of 55 meetups spanning the globe and you’re encouraged to add your own. 

Node.js Foundation  

💻 Jobs  

[Senior Full Stack JavaScript Developer - Atlanta, GA (Full-Time)](https://www.sstid.com/careers/javascript-developer) — Join our talented team building a cloud-based platform that’s helping some of America’s largest companies track things with RFID. 

Strategic Systems   

[UK Tech Jobs? Check Out hackajob](https://hackajob.co/p/discover?utm_source=cooperpress&utm_medium=paid&utm_campaign=nw_feb-28&utm_term=nodejs) — We look at your skills to match you with great companies. They apply to you, salary upfront. 

hackajob  

📘 Tutorials and Opinions  

[Build and Deploy Serverless Apps with Next.js 8 and Zeit Now](https://blog.hasura.io/build-and-deploy-serverless-apps-with-nextjs-8-zeit-now/) — You can configure the latest version of Next.js (a universal framework for React commonly used to introduce server-side rendering to React apps) to generate lambdas for each page and work serverlessly. 

Praveen Durairaj   

[The Ultimate Guide to Performance Monitoring in Node.js](https://pages.nodesource.com/guide-performance-monitoring-nodejs-nodeweekly.html) 

NodeSource sponsor   

[Using Fastify and Preact for Quick Web App Prototyping](https://loige.co/fastify-and-preact-for-quick-web-app-prototyping/) — Two technologies we haven’t mentioned for quite a while come together here in building a simple full-stack app. 

Luciano Mammino   

[How, in General, Does Node.js Handle 10,000 Concurrent Requests?](https://stackoverflow.com/q/34855352/3951) — A classic Stack Overflow answer that might help you understand how single and multi threaded environments interact. 

Stack Overflow   

[Node.js Task Runners: Are They Right for You?](https://blog.logrocket.com/node-js-task-runners-are-they-right-for-you-bb29ea30b7fa) — A look at task runners in Node.js by comparing their philosophical approaches, configuration, and looking at a simpler alternative. 

Thomas Hunter II   

[The Basics of Server-Side Caching in Express.js](https://blog.bitsrc.io/server-side-caching-in-expressjs-24038daec102) 

Chidume Nnamdi  

🔧 Code and Tools  

[Docker Images of Nightly Node.js Builds](https://hub.docker.com/r/vdeturckheim/node_nightly) — The creator says it best: _“Obviously not to be used in production but great for testing: know in advance what will break and plan support for future releases of Node.js early.”_ 

Vladimir de Turckheim   

[Video for Node.js with Mux](https://get.mux.com/2IB1rVf) — Easily build beautiful video experiences into your Node app with our SDK. 

Mux sponsor   

[npmf: Fetch Quick Info of an npm Pacakge from the Terminal](https://github.com/rousan/npmf) — If you want to try it quickly, just run `npx npmf lodash`, for example. Or even `npx npmf npmf` if you want to get all meta :-) 

Rousan Ali   

[Play.js: A Node and React Native IDE for iPhone and iPad](https://playdotjs.com/) — It’s on the iOS App Store and costs a few dollars. 

nakiostudio s.l.   

[ms: Tiny Millisecond Conversion Utility](https://github.com/zeit/ms) — For example: `ms('2 days')` returns `172800000`, and `ms(60000)` returns `1m`. 

ZEIT   

[wait-for-localhost: Waits for A Port on `localhost` to Be Ready](https://github.com/sindresorhus/wait-for-localhost) 

Sindre Sorhus   

[he: A Robust HTML Entity Encoder/Decoder](https://github.com/mathiasbynens/he) 

Mathias Bynens         

Curated by [Cooperpress](https://cooperpress.com/) and [Peter Cooper](https://twitter.com/peterc) 

[Change your email address](https://nodeweekly.com/edit_subscription/*|UID|*) or[Stop getting this newsletter](https://nodeweekly.com/leave/*|UID|*) 

© Cooper Press Ltd · Fairfield Enterprise Centre, Louth, LN11 0LS, United Kingdom