--- title: "Electron 15.0 and Node v16.10.0" publication: "Node Weekly" issue: 406 published_at: "2021-09-23" canonical_url: "https://nodeweekly.com/issues/406" --- Plus revisiting Node.js garbage collection, and a Node powered Web analytics system. | #​406 — September 23, 2021 [Read on the Web](https://nodeweekly.com/issues/406) Node Weekly [![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60/sowqeezjjtyxsndh0y6l.jpg)](https://robertchen.cc/blog/2021/09/20/npm-rce) [The Story of 5 RCEs Found in `npm` for $15,000](https://robertchen.cc/blog/2021/09/20/npm-rce) — A security researcher explains some remote code execution vulnerabilities he found in the `npm` tool and how they added up to $15K in payouts. Few of us need to dig into our tools this deeply but it’s interesting to see behind the curtain a little. (These RCEs prompted the `npm` upgrade request we covered [two weeks ago](https://nodeweekly.com/issues/404).) Robert Chen [Electron 15.0.0 Released](https://www.electronjs.org/blog/electron-15-0/) — Following on rather quickly from v14, Electron is now on a new eight week release cadence. v15 of the popular cross-platform desktop app framework upgrade to Chromium 94, V8 9.4, and Node.js 16.5.0 – none of which are huge advancements (though [WebCodecs support](https://web.dev/webcodecs/) may interest some), but it’s always great to see how up to date Electron is kept. Sofia Nguy and Keeley Hammond [![\](https://copm.s3.amazonaws.com/361c8014.png)](https://dashboard.redisgreen.net/nodeweekly) [Fast Redis Hosting and Analytics](https://dashboard.redisgreen.net/nodeweekly) — RedisGreen databases include seamless online upgrades, SSL encryption, key size tracking, memory mapping, and more. RedisGreen sponsor [Node.js Garbage Collection Explained](https://blog.risingstack.com/node-js-at-scale-node-js-garbage-collection/) — Learn how garbage collection and memory management works in practice with Node.js complete with illustrations and code examples. This is an older item but recently updated. RisingStack Engineering [Node v16.10.0 (Current) Released](https://nodejs.org/en/blog/release/v16.10.0/) — No big changes, but lots of smaller things, like `npm` and Acorn being updated and a new way to limit requests per connection via `http`. Bethany Griggs [How to Implement Logging in a Node App with Pino-Logger](https://css-tricks.com/how-to-implement-logging-in-a-node-js-application-with-pino-logger/) — [Pino](https://getpino.io/) is a low overhead Node logging library that you can use with any Node app and is easy to integrate with any Web framework too. Sarthak Duggal [Creating a Slack Bot with Serverless Framework](https://medium.com/schibsted-engineering/slack-bot-with-serverless-framework-e96fcdbd83a0) — The basics of implementing Slack bots with Serverless and hooking one up to PagerDuty on-call schedules. Joakim Wånggren [A Next.js 'New Post' Node Script](https://elijahmanor.com/blog/nextjs-new-post) — How a developer went about creating a Node-powered script to simplify creating new blog posts in a Next.js-based site. Elijah Manor [Announcing JavaScript Security Sessions at SnykCon | Register for Free](https://hopin.com/events/snykcon-2021/?utm_source=CP-Node-Weekly&utm_medium=Paid-Email&utm_campaign=Event-SnykCon-2021&utm_content=SnykCon-Agenda) Snyk.io sponsor [Track Twitter Follower Growth Over Time with a Serverless Node API](https://mokkappsdev.medium.com/track-twitter-follower-growth-over-time-using-a-serverless-node-js-api-on-aws-amplify-a72502f024e4) — Yet again another great use case for Node.js and serverless. AWS Amplify makes an appearance here, too. Michael Hoffmann (Mokkapps) [How to Debug Cloudflare Workers with AppSignal](https://blog.appsignal.com/2021/09/15/how-to-debug-cloudflare-workers-with-appsignal.html) Wanyoike Michael 🛠 Code & Tools [![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60/klslw1eon4rkq8wfemgn.jpg)](https://github.com/electerious/Ackee) [Ackee: A Self-Hosted, Node-Based Web Analytics Tool](https://github.com/electerious/Ackee) — If you want to self host your own Web analytics system and have privacy in mind. Tobias Reich [nbb: Adhoc ClojureScript Scripting on Node.js](https://github.com/borkdude/nbb) — If you want to write ClojureScript and run it quickly on top of Node, this provides a way. Michiel Borkent [Typegoose 9.0: Define Mongoose Models using TypeScript Classes](https://github.com/typegoose/typegoose) — If you’re a Node developer and using [Mongoose](https://mongoosejs.com/) and want to be using TypeScript, this is for you. Typegoose [Detect Latency in Your Code Without Affecting Node App Performance](https://www.datadoghq.com/dg/apm/node-application-performance/?utm_source=Advertisement&utm_medium=CooperPress&utm_campaign=CooperPress-NodeWeeklyAPMB) Datadog APM sponsor [ow 0.28.0: Function Argument Validation for Humans](https://github.com/sindresorhus/ow) — A fluent API to define constraints for function arguments (e.g. `ow(input, ow.string.minLength(5))`) and get nice error messages if those validations fail. Sindre Sorhus [i18n-tools: CLI to Make Common Operations Around i18n Files Simpler](https://github.com/jy95/i18n-tools) — Convert i18n JSON files to xslx or CSV (and vice versa) or compare two i18n files for differences. Jacques Yakoub [node-pg-migrate 6.0: Node Powered Database Migration Management for Postgres](https://github.com/salsita/node-pg-migrate) Salsita Software [HyperExpress 3.0: High Performance Node Server Powered by uWebSockets.js Under the Hood](https://github.com/kartikk221/hyper-express) Kartik [Glob 7.2.0: Match Files Using Shell-Style Patterns](https://github.com/isaacs/node-glob) Isaac Z. Schlueter [ESLint Rules for Migrating Projects from CommonJS to ESM](https://gist.github.com/Jaid/164668c0151ae09d2bc81be78a203dd5) Jaid 💻 Jobs [Node.js Developer at X-Team (Remote)](https://x-team.com/remote-nodejs-developer-jobs/?utm_source=cooperpress&utm_medium=email-ad&utm_campaign=cooperpress-node&utm_content=node) — Join the most energizing community for developers and work on long-term projects for Riot Games, FOX, Sony, Coinbase, and more. X-Team [Find Tech Jobs with Hired](https://hired.com/join/?utm_source=newsletter&utm_medium=sponsor&utm_campaign=%28b2c%29%28l-all%29%28r-all%29%28cooper-nodeweekly%29&utm_content=find-your-next-job) — Create a profile on Hired to connect with hiring managers at growing startups and Fortune 500 companies. It's free for job-seekers. Hired **Got a new email?** You can [change your address here](https://nodeweekly.com/edit_subscription/*|UID|*). --- **Bored of us?** [Click here to stop getting Node Weekly](https://nodeweekly.com/leave/*|UID|*). --- **Got a link for us?** Reply and tell us. We can't include everything but we'll look at anything you send. Thanks! --- **Want to sponsor?** Email `[kristina@cooperpress.com](mailto:kristina@cooperpress.com)` for details. --- Published by Cooper Press Ltd. Fairfield Enterprise Centre, Louth, LN11 0LS, United Kingdom [Stop getting this newsletter.](https://nodeweekly.com/leave/*|UID|*)