peacenotwar: How an npm Package Protested Russia's Invasion of Ukraine — Users of a variety of systems (including Vue CLI, as seen here) began to notice that the node-ipc dependency was doing some unusual (to put it mildly) things, such as (originally) corrupting files on systems geolocated to Russia or Belarus, and sharing messages of protest via peacenotwar. This is a complex story, but well outlined in this post, and yet another reminder of how fragile dependencies can be.

Liran Tal (Snyk)

Build a Fullstack App from Scratch — Join Scott Moss for this detailed video course on building a fully featured app using a modern stack (React, Next.js, TypeScript, Postgres). You'll cover UI, data modeling, authentication, state management, deployment, testing, and more.

Frontend Masters sponsor

Node.js Security Releases Due Imminently — As of the time of publishing, these releases haven’t dropped yet, but they’re imminent and will incorporate upstream patches from OpenSSL for an as yet undisclosed high severity issue.

Joe Sepi (Node.js Project)

Faker 6.0: Generate Massive Amounts of Fake Data — After some issues with a maintainer going rogue in January, a community team took over the popular Faker project and their first major release is now out, complete with ESM support. There are v5 to v6 migration instructions if you want to upgrade.

Faker.js Team

Why and How to Use HTTPS in Your Local Development Environment — Learn why you should use HTTPS even for development and how to set things up, including spinning up a simple Node.js server.

Andrea Chiarelli

Updating Node Dependencies Automatically, Selectively, or Incrementally — A tour of npm-check-updates.

Elijah Manor

How to Build a File Upload Service with Vanilla JavaScript — Building a file upload service with vanilla JavaScript, from scratch, with a method that requires no npm packages and no dependencies outside of the standard library.

Pankaj Tanwar

Write Your Real-Time Apps in Python with This Tutorial for InfluxDB

InfluxData sponsor

Taiko: A Library and REPL to Automate Browsers — This differs from Puppeteer or Playwright by being higher level and more visual. It includes a REPL mode and is more designed to work with a visible, rather than headless, browser instance, with a bigger focus on testing.

Gauge

Pino 7.9.0: A Fast 'Very Low Overhead' JSON Logger — There are code samples for using it with Fastify, Express, Hapi, Koa, and more.

pino

Build Internal Tools in Minutes with Retool, Where Visual Programming Meets the Power of Real Code

Retool sponsor

node-json-db: A Simple JSON-Powered File-Based Data Store — For when you need a simple database but.. you don’t want a ‘database’, if you know what I mean.

Antoine Aflalo