--- title: "It's all about security" publication: "Node Weekly" issue: 462 published_at: "2022-11-10" canonical_url: "https://nodeweekly.com/issues/462" --- Plus a lightweight job scheduling solution, using TypeScript with Node.js, and giving SQLite some soul. | #​462 — November 10, 2022 [Read on the Web](https://nodeweekly.com/issues/462) Together with [![AppSignal logo\](https://res.cloudinary.com/cpress/image/upload/c_fill,g_auto,e_trim,w_700,h_120/e_make_transparent/co_white,e_outline:7/lme8p344dw1aodshz9px.png)](https://www.appsignal.com/nodejs?utm_source=node-weekly-sponsored&utm_medium=email&utm_campaign=2022-11-10) ![Node.js Weekly](https://res.cloudinary.com/cpress/image/upload/v1653576619/lgfqinzbdqttwmhvljxb.png) [![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60,q_auto/bpdp2qywtwoncwmp5t7z.jpg)](https://nodejs.org/en/docs/guides/security/) [Node.js Security Best Practices](https://nodejs.org/en/docs/guides/security/) — A new official document from the Node.js team providing guidelines on securing your Node apps by looking at what the main threats are and how to mitigate them. Node.js Project And.. [Node Security _Releases_: 19.0.1, 18.12.1, 16.18.1 and 14.21.1](https://nodejs.org/en/blog/vulnerability/november-2022-security-releases/) — Three security issues have been resolved in these point releases. Two X.509 certificate verification vulnerabilities, and a bug in Node’s rebinding protector that allowed invalid _octal_-denoted IP addresses (it might sound niche but where there’s a hacker’s will, there’s a way). Juan José Arboleda (Node.js Team) [![\](https://copm.s3.amazonaws.com/a4131de7.png)](https://www.appsignal.com/nodejs?utm_source=node-weekly-sponsored&utm_medium=email&utm_campaign=2022-11-10) [An Intuitive APM for Node.js Developers](https://www.appsignal.com/nodejs?utm_source=node-weekly-sponsored&utm_medium=email&utm_campaign=2022-11-10) — AppSignal doesn’t just offer Node.js performance monitoring and error tracking. We have a full set of features to monitor your application from A to Z packed in a clear and intuitive interface. All features are included in all plans. AppSignal sponsor [Hapi 21: A Simple, Secure Node App Framework](https://github.com/hapijs/hapi) — v21 bills [itself](https://github.com/hapijs/hapi/releases/tag/v21.0.0) as a ‘medium-sized release’ focused on modernization and all round Node 18 (and ESM) support. Hapi is notable as having no external dependencies while offering a lot out of the box. [GitHub repo](https://github.com/hapijs/hapi). hapi.js Project [Getting Started with MongoDB Atlas & Azure Functions using Node.js](https://www.thepolyglotdeveloper.com/2022/11/getting-started-mongodb-atlas-azure-functions-nodejs/) — If you don’t want to manage any infrastructure yourself, MongoDB’s managed platform can provide the database and Azure Functions can provide the runtime. Nic Raboy [Deploying a Simple Node App on Several Cloud Providers](https://medium.com/eleven-sh/deploying-a-simple-node-js-app-with-https-on-cloud-providers-in-2022-heroku-render-fly-io-aws-9358294803c5) — You’ve got a Node app, you’ve got nowhere to deploy it.. what to do? Jérémy tries several options including classic and challenger platforms. Note that this is focused on the _how_ (complete with errors and giving up!) with no opinion as to which _you_ should choose. Jérémy Levy [Using TypeScript with Node.js](https://www.robinwieruch.de/typescript-node/) — Robin has written a short series of three ‘setting up a backend’ posts with this outing covering the bare essentials of bringing TypeScript into Node, including introducing `tsc`, `ts-node` and installing types of things like Express. A useful primer. Robin Wieruch [What's New in Mongoose 6.5: `castObject()` and `applyDefaults()`](https://thecodebarbarian.com/whats-new-in-mongoose-6-5-castobject-applydefaults.html) — Makes it easier to use your Mongoose schemas against plain old JavaScript objects. Valeri Karpov [Why Your Node Backend Needs an API Layer and How to Build It](https://semaphoreci.com/blog/node-js-api-layer) Antonello Zanini (Semaphore) [Learning Good Habits by Watching a Staff Software Consultant](https://blog.testdouble.com/posts/2022-11-09-what-i-learned-watching-a-staff-consultant/) Nichol Alexander and Kevin Baribeau 🛠 Code & Tools [![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60,q_auto/aaruuph7wmeygxduujfo.jpg)](https://github.com/agenda/agenda) [Agenda 5.0: Lightweight Job Scheduling for Node](https://github.com/agenda/agenda) — Uses a MongoDB-backed persistence layer and offers repeatable jobs, delayed jobs, and optional UI and REST API frontends. v5 requires MongoDB 4.0+. The Redis-based [Bull](https://www.npmjs.com/package/bull) is another option to consider in this space if you need something _beefier._ Ryan Schmukler [If You Are Building a Notification Microservice Internally: Read This](https://www.courier.com/blog/the-developers-guide-user-requirements/?utm_campaign=cooper-press&utm_source=email&utm_medium=node-weekly-11-10-sponsored-link&utm_content=user-requirements-blog) — Learn about UX requirements, what to plan for with scaling, reliability, routing & preferences, and audit visibility. Courier.com sponsor [safe-json-value 1.9: For When JSON Serialization Should Never Fail](https://github.com/ehmicky/safe-json-value) — Prevents `JSON.serialize()` from throwing an exeception, changing types, or otherwise transforming values unexpectedly, because sometimes you need that sort of reassurance. ehmicky [Soul: A REST and Realtime Server for SQLite](https://github.com/thevahidal/soul) — Run `soul -d database.db -p 8000` and the SQLite database in `database.db` is made available over a REST _and_ WebSocket API. Vahid Al [Nest 9.2: A Mature Framework for Building Scalable Server-Side Apps](https://nestjs.com/) — It’s been a couple of years since we linked to it properly, but this framework continues to go from strength to strength. Need a full on intro? There’s a [▶️ three-hour screencast](https://www.youtube.com/watch?v=GHTA143_b-s)(!) for that. [GitHub repo](https://github.com/nestjs/nest). Kamil Myśliwiec [Leoric 2.9: A Node ORM for MySQL, Postgres and SQLite](https://leoric.js.org/) — It’s heavily influenced by the Active Record pattern (such as is popular in the Ruby on Rails world, say). [GitHub repo](https://github.com/cyjake/leoric). Leoric [Best-In-Class Geofencing, Trip Tracking, Routing & Geocoding Software](https://radar.com?utm_campaign=pr_global_mult_all_tech_20221110-node-weekly_gen-product_ru1&utm_medium=display&utm_source=cooperpress) Radar sponsor - [Prisma 4.6](https://github.com/prisma/prisma/releases/tag/4.6.0) ↳ Popular Node + TypeScript ORM. Fantastic release notes as usual, too. - [Strapi 4.5](https://strapi.io/blog/announcing-strapi-v4.5) ↳ Popular Node-based headless CMS. - [pnpm 7.15](https://github.com/pnpm/pnpm/releases/tag/v7.15.0) ↳ Fast, disk space efficient package manager. - [ws 8.11](https://github.com/websockets/ws) ↳ Fast, well tested WebSocket client & server library. - [Slonik 33.0](https://github.com/gajus/slonik) ↳ Advanced Postgres client with type safety. - [HyperExpress 6.5.2](https://github.com/kartikk221/hyper-express) ↳ High-perf HTTP server powered by uWebsockets.js. - [Zip It and Ship It 8.1](https://github.com/netlify/zip-it-and-ship-it) ↳ Prepare Node Lambda functions for deployment. 💻 Jobs [Find Tech Jobs with Hired](https://hired.com/join/?utm_source=newsletter&utm_medium=sponsor&utm_campaign=%28b2c%29%28l-all%29%28r-all%29%28cooper-nodeweekly%29&utm_content=find-your-next-job) — Create a profile on Hired to connect with hiring managers at growing startups and Fortune 500 companies. It's free for job-seekers. Hired [Full Stack Engineer (EU Remote or Relocate to Berlin)](https://feather-insurance.com/careers/full-stack-engineer?channel_id=921907) — We’ve built a product thousands of people love (see Trustpilot if you don’t believe us). We need your help with **React, GraphQL & TypeScript**. Feather **Got a link for us?** Reply and tell us. We can't include everything but we'll look at anything you send. _Thanks!_ --- **Sponsorship:** Email `[kristina@cooperpress.com](mailto:kristina@cooperpress.com)` for details. --- Published by Cooper Press Ltd. Fairfield Enterprise Centre, Louth, LN11 0LS, United Kingdom [Cancel your subscription](https://nodeweekly.com/leave/*|UID|*) or [change your address.](https://nodeweekly.com/edit_subscription/*|UID|*)