--- title: "The npm audit that cried wolf?" publication: "Node Weekly" issue: 396 published_at: "2021-07-08" canonical_url: "https://nodeweekly.com/issues/396" --- Plus the Node releases you might not want, the packages you do, and a lot of Nest.js. | #​396 — July 8, 2021 [Read on the Web](https://nodeweekly.com/issues/396) Node Weekly [![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60/fc2d1qqdzp2f2xtrftwb.jpg)](https://overreacted.io/npm-audit-broken-by-design/) [`npm audit`: Broken by Design](https://overreacted.io/npm-audit-broken-by-design/) — Dan says it best: _“The way `npm audit` works is broken. Its rollout as a default after every `npm install` was rushed, inconsiderate, and inadequate for the front-end tooling.”_ Dan adopts an unusually snarky tone but does a good job of demonstrating why getting panicked about vulnerabilities as if they’re all as important as each other can be a bad thing. Dan Abramov [TypeScript and Native ESM on Node.js](https://2ality.com/2021/06/typescript-esm-nodejs.html) — This topic comes up time and time again, and for good reason - it’s the way things are headed. Dr. Axel covers the essentials you need to know in order to use and produce native ECMAScript/ES modules on Node when using TypeScript. Dr. Axel Rauschmayer [![\](https://copm.s3.amazonaws.com/8321d472.png)](https://www.polyscale.ai/) [Scale MySQL Globally in Minutes Without Code](https://www.polyscale.ai/) — PolyScale intelligently distributes and caches MySQL data to the edge. Implement in minutes without writing code or deploying servers. PolyScale sponsor [Building an API with Nest.js: A 39 Part Series](https://wanago.io/2021/07/05/api-nestjs-stripe-events-webhooks/) — [Nest.js](https://nestjs.com/) is a popular Node server side app framework and this epic series is a must-see for anyone who wants to learn how to use it or even an existing user who needs their memory jogged. Marcin Wanago [Node v16.4.2, v14.17.3, and v12.22.3 Released, But You Probably Don't Need Them](https://nodejs.org/en/blog/release/v16.4.2/) — These releases fix a bug introduced affecting those who use the Windows installer and are in a non-English locale.. otherwise, you can walk on by. Node.js [Exploring the Possibilities of Node’s Virtual Machine Module](https://t.co/KMo9k8DItr?amp=1) — The `vm` module provides a way to work with the underlying V8 engine and execute code in a separate context directly within it. Note, however, it’s not a security mechanism for running truly untrusted code. Louis Petrik [Implementing Microservices in Node](https://frontegg.com/blog/implementing-microservices-in-nodejs) — Nest.js makes another appearance here. Cheli Kalina 💻 Jobs [Now Hiring: Work with the Best, Building the Best](https://www.econify.com/jobs/Software-Engineer) — The sharpest developers, building the fastest websites. Looking for more, to build more. [Join us](https://www.econify.com/jobs/Software-Engineer). Econify [Senior Backend Engineer (Berlin / Remote)](https://feather-insurance.com/careers/senior-backend-engineer) — Want to join a small startup with a big growing potential (we double every year)? Feather is looking for a backend engineer. Feather [Find a Job Through Hired](https://hired.com/join/?utm_source=newsletter&utm_medium=sponsor&utm_campaign=%28b2c%29%28l-all%29%28r-all%29%28cooper-nodeweekly%29&utm_content=find-your-next-job) — Create a profile on Hired to connect with hiring managers at growing startups and Fortune 500 companies. It's free for job-seekers. Hired 🛠 Code and Tools [zx 2.0: A Tool for Writing Better Shell Scripts](https://github.com/google/zx) — Tired of turning to bash, Python or Ruby to throw together a quick script? This makes it easier to do so from the JavaScript you know and love. We featured it just two months ago but v2.0 has just dropped. Google [fast-npm-search: A Super Fast npm Package Search](https://fast-npm-search.xyz/) — Mostly seems to be a demo of a ‘search as a service’ platform but, well, it _is_ pretty fast. anve.re [Run Faster and Safer Than Linux with Open Source Unikernels](https://nanos.org) NanoVMs sponsor [Opossum 6.2.0: A Circuit Breaker for Asynchronous Functions](https://nodeshift.dev/opossum/) — You can do things like trigger a failure after a certain timeout, fail entirely if a certain error threshold is reached, etc. [GitHub repo](https://github.com/nodeshift/opossum). Red Hat [Nest 8.0: A Mature Framework for Building Scalable Server-Side Apps](https://github.com/nestjs/nest) — We’ve mentioned it twice already in this issue, so we may as well mention [a new major release](https://github.com/nestjs/nest/releases/tag/v8.0.0) too.. :-) Kamil Myśliwiec [wait-on 6.0: A CLI and Node Library to Wait for Ports, Files, Sockets, etc.](https://github.com/jeffbski/wait-on) — For when you need to wait until files, ports, sockets, and similar resources become available (or the opposite). Jeff Barczewski [Monitoring Template to Track Your Node.js Application Performance](https://www.influxdata.com/influxdb-templates/node-js/?utm_source=vendor&utm_medium=referral&utm_campaign=2021-07-08_spnsr-nl_node-js-template_global&utm_content=nodeweekly) InfluxData sponsor [pg-anonymizer 0.4.0: Anonymized Data Dumping from Postgres](https://github.com/rap2hpoutre/pg-anonymizer) — A Node.js-powered tool for taking anonymized exports of databases. Sensitive data is replaced with faked data of equivalent types. Raphaël Huchet [tiff 5.0: A TIFF Image Decoder Written Entirely in JavaScript](https://github.com/image-js/tiff) — It’s been almost twenty years since I’ve gone near a TIFF file, but if needs must.. Michaël Zasso [Mercurius 8.0: Implement GraphQL Servers and Gateways with Fastify](https://github.com/mercurius-js/mercurius) Matteo Collina and contributors **Got a new email?** You can [change your address here](https://nodeweekly.com/edit_subscription/*|UID|*). --- **Bored of us?** [Click here to stop getting Node Weekly](https://nodeweekly.com/leave/*|UID|*). --- **Got a link for us?** Reply and tell us. We can't include everything but we'll look at anything you send. Thanks! --- **Want to sponsor?** Email `[kristina@cooperpress.com](mailto:kristina@cooperpress.com)` for details. --- Published by Cooper Press Ltd. Fairfield Enterprise Centre, Louth, LN11 0LS, United Kingdom [Stop getting this newsletter.](https://nodeweekly.com/leave/*|UID|*)