--- title: "Node v20 released" publication: "Node Weekly" issue: 482 published_at: "2023-04-18" canonical_url: "https://nodeweekly.com/issues/482" --- Plus npm security best practices, AdminJS 7.0, and some strong SOAP for Node. | #​482 — April 18, 2023 [Read on the Web](https://nodeweekly.com/issues/482) Together with [![Memetria\](https://res.cloudinary.com/cpress/image/upload/c_fill,g_auto,w_600,h_145/e_make_transparent/co_white,e_outline:7/vvpdctzacmq3xehpvwps.png)](https://dashboard.memetria.com/nodeweekly) ![Node.js Weekly](https://res.cloudinary.com/cpress/image/upload/v1653576619/lgfqinzbdqttwmhvljxb.png) [![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60,q_auto/wmxstphqacfb3rxvdmfi.jpg)](https://nodejs.org/en/blog/announcements/v20-release-announce) [Node.js 20 Released](https://nodejs.org/en/blog/announcements/v20-release-announce) — A quirk of fate meant this issue was delayed for a couple of hours and.. Node v20 was launched in that time. Phew! This means we haven’t had much time to digest the news, though, but the key updates include: - **Experimental support for a permission model.** This is a feature [Deno has at its core](https://deno.land/manual@v1.32.4/basics/permissions), but now you can restrict/allow access to certain capabilities with Node too. - **V8 11.3** (which finally includes [Regexp `/v` flag support](https://chromestatus.com/feature/5144156542861312)) - **The `node:test` test runner goes stable.** - Official support for Windows on AArch64/ARM64. - Numerous performance improvements. We look forward to featuring more about the release next week too. The Node.js Team [![\](https://copm.s3.amazonaws.com/8d4c06db.png)](https://dashboard.memetria.com/nodeweekly) [Memetria: Secure, Scalable Redis 7 Hosting](https://dashboard.memetria.com/nodeweekly) — The latest Redis features, instrumented and scaled with the tools teams need as they grow. Memetria sponsor [Node v18.16.0 (LTS) Released](https://nodejs.org/en/blog/release/v18.16.0) — Node v18 LTS gains some backports from v19 in the shape of the Ada WHATWG-compliant URL parser and (initial) support for packaging a JavaScript app with Node into a single executable (a feature Node 20 – above – has developed further also). Danielle Adams **IN BRIEF:** - **/[]/** A look at a JS-specific quirk in regular expressions [when empty character classes are used](https://www.abareplace.com/blog/emptybrackets/). - [The ECMAScript 2023 spec](https://tc39.es/ecma262/2023/) has been approved by TC39 and is now with the ECMA General Assembly for eventual final approval. If you haven't got several hours to read the spec, Paweł Grzybek can help you out with a [simpler look at a few new features.](https://pawelgrzybek.com/whats-new-in-ecmascript-2023/) [npm Security Best Practices](https://cheatsheetseries.owasp.org/cheatsheets/NPM_Security_Cheat_Sheet.html) — Part of the Open Web Application Security Project’s (OWASP) extensive [cheat sheet series](https://cheatsheetseries.owasp.org/). This one, written by Liran Tal, covers ten key points to keep in mind with regards to using npm and npm packages. OWASP Cheat Sheet Series In other Liran news, he's released [📗 Node.js Secure Coding](https://www.nodejs-security.com/), a (paid) book covering secure coding practices through performing local attacks on real-world packages and analyzing the vulnerable code behind them. [Deno vs. Node: No One is Ready for the Move](https://cult.honeypot.io/reads/deno-vs-node-main-differences/) — [Deno](https://deno.land/) has a lot going for it as an alternative to Node — but Node has time, maturity and a huge, established userbase on its side. Piumi Liyana Gunawardhana (Honeypot) [How to Stream File Uploads to S3 Object Storage from Node](https://austingil.com/upload-to-s3/) Austin Gil 🛠 Code & Tools [![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60,q_auto/v1681832196/vffzxom5hodwvmybmzly.png)](https://adminjs.co/) [AdminJS 7.0: An Admin Panel for Node Apps](https://adminjs.co/) — An ‘automatic’, open source admin interface you can introduce to existing apps. Wire it up to your ODM/ORM, and off you go. Here’s [what’s new in v7.0](https://docs.adminjs.co/installation/whats-new-in-v7), a [v7 migration guide](https://docs.adminjs.co/installation/migration-guide-v7), and [▶️ a four-minute screencast intro](https://www.youtube.com/watch?v=gNCo4idfP0k) to what’s new. [GitHub repo.](https://github.com/SoftwareBrothers/adminjs) AdminJS Team [Strong SOAP: A SOAP Driver for Node](https://github.com/loopbackio/strong-soap) — If you need to interoperate with SOAP-based services, here’s a fresh (clean?) option that bills itself as a complete rewrite of the earlier node-soap. LoopBack [Avoid Falling Victim to Malicious Packages in OS Ecosystems](https://resources.snyk.io/malicious-packages-open-source-ecosystems/?utm_campaign=aom_2023&utm_medium=paid-email&utm_source=cooperpress-node-weekly&utm_content=malicious-packages-open-source-ecosystems) — Get a broader view of the rising trend in malicious packages in OS ecosystems — and how to avoid them — in Snyk’s recent article on the theme. Snyk sponsor [Actio: A Framework for Backend Apps](https://github.com/crufters/actio) — For both microservices or monoliths. Comes with quite a few batteries included in areas like auth, file upload support, configuration, and even a payment service. Crufters [Discord.js V14 Bot: A Multipurpose Discord Bot](https://github.com/saiteja-madha/discord-js-bot) — If you want a Discord bot you can customize but that has a lot of features like moderation, stats, and social features built in, this is for you. Sai Teja Madha [![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60,q_auto/sc9b2wa5hoj480iptr93.jpg)](https://github.com/haxtra/liquery) [LiQuery: SQLite Search, Tagging, Filtering and Sorting via Simple Text Queries](https://github.com/haxtra/liquery) — SQL already offers ‘text queries’, of course, but this is an interesting experiment to make things even more concise with a basic search engine style syntax. Hax 💻 Jobs [Find Tech Jobs with Hired](https://hired.com/join/?utm_source=newsletter&utm_medium=sponsor&utm_campaign=%28b2c%29%28l-all%29%28r-all%29%28cooper-nodeweekly%29&utm_content=find-your-next-job) — Hired makes job hunting easy-instead of chasing recruiters, companies approach you with salary details up front. Create a free profile now. Hired **QUICK RELEASES:** - [graphql-request 6.0](https://github.com/jasonkuhrt/graphql-request) ↳ Minimal GraphQL client for Node & browsers. - [pg-boss 9.0](https://github.com/timgit/pg-boss) ↳ Postgres-backed job queuing system. - [Dynamoose 3.2](https://github.com/dynamoose/dynamoose) ↳ Modeling tool for Amazon DynamoDB. - [x-crawl 5.1](https://github.com/coder-hxl/x-crawl) ↳ Flexible multi-purpose crawler library. - [express-validator 7.0.1](https://github.com/express-validator/express-validator) ↳ Express middleware for [validator.js](https://github.com/validatorjs/validator.js). - [Slonik 33.3](https://github.com/gajus/slonik) ↳ Type-safe Node Postgres client library. - [NodeGui 0.59.1](https://github.com/nodegui/nodegui) ↳ Qt 6-powered native desktop app framework. - [pnpm 8.3](https://github.com/pnpm/pnpm) ↳ Fast, disk space efficient package manager. **Got a link for us?** Reply and tell us. We can't include everything but we'll look at anything you send. _Thanks!_ --- **Sponsorship:** Email `[kristina@cooperpress.com](mailto:kristina@cooperpress.com)` for details. --- Published by Cooper Press Ltd. Fairfield Enterprise Centre, Louth, LN11 0LS, United Kingdom [Cancel your subscription](https://nodeweekly.com/leave/*|UID|*) or [change your address.](https://nodeweekly.com/edit_subscription/*|UID|*)