---
title: "npm CLI hasn't had a commit in 3 months..?"
publication: "Node Weekly"
issue: 293
published_at: "2019-06-20"
canonical_url: "https://nodeweekly.com/issues/293"
---

This week's Node.js news, tutorials, and projects       

#293 — June 20, 2019 

[Read on the Web](https://nodeweekly.com/issues/293)   

Node Weekly 

[![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60/xfsxzdao1vnk6eu0884m.jpg)](https://blog.npmjs.org/post/185680936500/protecting-package-publishers-npm-token-security)   

[Protecting Package Publishers with npm Token Security](https://blog.npmjs.org/post/185680936500/protecting-package-publishers-npm-token-security) — In collaboration with GitHub’s [token scanning program](https://developer.github.com/partnerships/token-scanning/), npm has set up a system where when you commit or push a change to GitHub in a public repo, any npm authentication tokens found will be checked and revoked, in an effort to keep you safe. 

The npm Blog   

[Understanding Worker Threads in Node](https://nodesource.com/blog/worker-threads-nodejs) — First introduced as a experimental feature in Node 10.5, _worker threads_ are now a standard, built-in feature and enable you to run separate JavaScript files in separate threads (without introducing threads as a first-class citizen to Node generally). 

Liz Parody   [![\](https://copm.s3.amazonaws.com/b696a028.jpg)](https://www.manifold.co/blog/announcing-marketplace-as-a-service-for-developer-platforms?utm_source=newsletter&utm_medium=node_weekly&utm_campaign=june20) 

[Manifold Launches Marketplace-as-a-Service](https://www.manifold.co/blog/announcing-marketplace-as-a-service-for-developer-platforms?utm_source=newsletter&utm_medium=node_weekly&utm_campaign=june20) — Developer-facing platforms can now add a cloud services marketplace to their ecosystem with little effort and zero upfront costs. 

Manifold sponsor    

[What's the Status of `npm` 6.9.1?](https://gist.github.com/aeschright/8ed09cbc2a4aee00fcb4ad35086d76a6) — You might recall that a couple of months ago, [npm’s job cuts](https://www.theregister.co.uk/2019/04/01/npm_layoff_staff/) were causing issues. As part of the fallout, it seems [npm cli](https://github.com/npm/cli) hasn’t had a commit in 3 months, the [pull request for 6.9.1](https://github.com/npm/cli/pull/177) is sat in limbo, and things are at an impasse.. 

Audrey Eschright   

[Node vs Python 3: Which Is Fastest?](https://benchmarksgame-team.pages.debian.net/benchmarksgame/fastest/node-python3.html) — Spoiler.. it’s Node.js by a long shot! If you haven’t checked out the ‘Alioth’ _Computer Langauge Benchmarks_ for a few years, they’ve been tweaked a bit and Node is now compared against C++, Java, Python, and Ruby. C++ and Java still have an edge but JavaScript is a clear performance winner amongst traditional ‘scripting’ languages. 

The Computer Language Benchmarks Game  

💻 Jobs  

[Senior Node.js API Engineer - Exodus (Remote)](https://www.exodus.io/careers/#senior-node-api-engineer) — Do you live for beautiful APIs? We're looking for a meticulous, obsessive leader to focus on our backend API services. 

Exodus   

[Land a New Dev Job on Vettery](https://www.vettery.com/tech?utm_source=newsletter&utm_medium=cooper-nodeweekly&utm_term=tech&utm_content=grouped&utm_campaign=ad-88879) — Vettery specializes in tech roles and is completely free for job seekers. 

Vettery  

📚 Opinion & Tutorials  

[Node.js Memory Management in Container Environments](https://developer.ibm.com/articles/nodejs-memory-management-in-container-environments/) — Best practices for managing memory in container-based Node apps. 

Ravali Yatham   

[Using Push Notifications with Service Workers and Node](https://wanago.io/2019/06/17/using-push-notifications-with-service-workers-and-node-js/) — An easy to follow introduction to rigging up a front-end notifications system with a Node backend pushing out the messages. 

Marcin Wanago   

[Free Guide: The Evolution of JavaScript Tooling](https://www.sencha.com/resources/whitepaper/the-evolution-of-javascript-tooling/?utm_source=cooperpress&utm_medium=advertising&utm_campaign=sncextjs&utm_content=062019-sncextjs-ad-nw) — Learn the pros and cons of some of the most popular JavaScript frameworks & libraries, including Angular, React & Vue. 

SENCHA sponsor   

[How to Create a Secure Node.js GraphQL API](https://www.toptal.com/graphql/graphql-nodejs-api) — This GraphQL tutorial outlines how to create an API for use in Node projects and examines how it compares to REST-based solutions. 

Marcos Henrique da Silva   

[Web Scraping using Puppeteer and Node](https://clubhouse.io/developer-how-to/web-scraping-using-puppeteer-and-node) — A very beginner level, basic introduction. 

Hrithik Jha   

[What's New in Mongoose 5.6.0: Immutable Properties](http://thecodebarbarian.com/whats-new-in-mongoose-5-6-immutable-properties.html) — If you use MongoDB from Node, this is for you. 

Valeri Karpov  

🛠 Code and Tools  

[readme-md-generator: A CLI That Generates Good-Looking `README.md` Files](https://github.com/kefranabg/readme-md-generator) — It’s pretty simple but the results are nice. Answer some questions and get a good starter template for your project’s `README.md` file. 

Franck Abgrall   

[OpenCV4NodeJS 5.0: Node Bindings to OpenCV 3 and OpenCV 4](https://github.com/justadudewhohacks/opencv4nodejs) — [OpenCV](https://opencv.org/) is a popular real-time computer vision library. Version 5.0 released this week has now added OpenCV 4 support. 

Vincent Mühler   

[Watch On-Demand: New and Exciting Features Landing in Node.js 12](https://pages.nodesource.com/new-features-nodejs12-0501-jsw.html) 

NodeSource sponsor   

[Hexo: A Node-Powered Blog Framework](https://hexo.io/) — A [new version](https://github.com/hexojs/hexo/releases/tag/3.9.0) just came out. 

Tommy Chen   

[websocket-as-promised 0.10.0: A Promise-based API for WebSockets](https://github.com/vitalets/websocket-as-promised) — For both browsers and Node.js. 

Vitaliy Potapov   

[EventEmitter3: A High Performance Event Emitter](https://github.com/primus/eventemitter3) — API compatible with Node’s standard [emitter](https://nodejs.org/api/events.html) but with some tweaks and extra performance. 

Primus   

[JSON-Node-Normalizer: Normalize JSON Data Types From JSON Schema Specifications](https://github.com/benjamin-allion/json-node-normalizer) — Basically a way to clean up data types in a JSON object based on a defined schema. 

Benjamin Allion   

[FUNC: Another Simple Way to Build Command-Line Tools](https://github.com/WittBulter/func) — A very small package that provides some niceties for creating simple CLI tools, particularly aimed at TypeScript Node developers. 

Witt   

[node-bitly: An Unofficial Bitly API Client](https://github.com/tanepiper/node-bitly) — Bitly is a well known URL shortening service. 

Tane Piper         

Curated by [Cooperpress](https://cooperpress.com/) and [Peter Cooper](https://twitter.com/peterc). 

[Change your email address](https://nodeweekly.com/edit_subscription/*|UID|*) or[Stop getting this newsletter](https://nodeweekly.com/leave/*|UID|*) 

© Cooper Press Ltd · Fairfield Enterprise Centre, Louth, LN11 0LS, United Kingdom