--- title: "Getting under Node's skin" publication: "Node Weekly" issue: 491 published_at: "2023-06-20" canonical_url: "https://nodeweekly.com/issues/491" --- Plus new security releases, a Node.js machine learning option, Commander.js 11.0, and packaging a Node.js app to sell it. | #​491 — June 20, 2023 [Read on the Web](https://nodeweekly.com/issues/491) Together with [![AppSignal logo\](https://res.cloudinary.com/cpress/image/upload/c_fill,g_auto,e_trim,w_700,h_120/e_make_transparent/co_white,e_outline:7/lme8p344dw1aodshz9px.png)](https://blog.appsignal.com/2023/05/18/transport-your-logs-with-winston-to-appsignal.html?utm_source=node-weekly-sponsored&utm_medium=email&utm_campaign=2023-05-18) ![Node.js Weekly](https://res.cloudinary.com/cpress/image/upload/v1653576619/lgfqinzbdqttwmhvljxb.png) [![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60,q_auto/qxsl7jfimwyoto7obqdz.jpg)](https://www.youtube.com/watch?v=UdTdBknk23A) ▶[Recreating a JS Runtime to Understand Node's Magic](https://www.youtube.com/watch?v=UdTdBknk23A) — Popular speaker, educator, Microsoft MVP _and_ Node.js core team member Erick gives a very enthusiastic talk on the latest ‘hello world’ in the JavaScript world: building a runtime 😏 Somehow, Erick manages to run through the key concepts involved in just 20 minutes. Erick Wendel [Node.js Security Releases Due Imminently](https://nodejs.org/en/blog/vulnerability/june-2023-security-releases) — Pencilled in for June 20, 2023 (today!), the Node.js 16.x, 18.x, and 20.x lines will all get fresh releases to fix a variety of medium and high severity security issues, as well as some OpenSSL related security updates. Keep an eye on this post if you want to upgrade ASAP. Rafael Gonzaga [![\](https://copm.s3.amazonaws.com/df39f726.png)](https://blog.appsignal.com/2023/05/18/transport-your-logs-with-winston-to-appsignal.html?utm_source=node-weekly-sponsored&utm_medium=email&utm_campaign=2023-05-18) [Transport Your Logs to AppSignal with Winston](https://blog.appsignal.com/2023/05/18/transport-your-logs-with-winston-to-appsignal.html?utm_source=node-weekly-sponsored&utm_medium=email&utm_campaign=2023-05-18) — Get access to all of your application's performance logs and metrics in one place. With Winston transport, you can send your application's logs directly to AppSignal with ease. AppSignal sponsor ⏰ The OpenJS Foundation presents its [latest Node.js security progress report](https://openjsf.org/blog/2023/06/16/node-js-security-progress-report-first-response-time-down-to-8-hours-new-security-release-announced/), noting that their 'first response time' for processing security reports is down to a mere 8 hours (compared to their target of 48). 👿 _The Register_ reports that malicious actors are exploiting expired AWS S3 buckets to [inject harmful code into legitimate npm packages](https://www.theregister.com/2023/06/19/npm_s3_buckets_malware/) without needing to modify existing code. 🦡 The Mongoose object modelling library for MongoDB now has [an online 'playground'](https://playground.mongoosejs.io/) – it's still early days, but shows off Valeri's [🐦 recent work in getting Mongoose to run in the browser](https://twitter.com/code_barbarian/status/1670107828864835584) using an experimental in-memory driver. [Packaging and Selling a Node.js App](https://docs.emailengine.app/packaging-and-selling-a-node-js-app/) — The author sells an email automation tool built in Node using numerous libraries under the hood include Hapi, BullMQ and Nodemailer. There’s not a lot of depth here, but it’s interesting to see how someone brings together all the parts needed to sell such an app commercially. Andris Reinman (EmailEngine) ▶[Production-Ready Lambdas with Node.js](https://www.youtube.com/watch?v=_OBBwuplpBY) — Plenty of real world experience is boiled into this 40-minute talk from an AWS Serverless Hero. Luciano Mammino [A Visual Guide to Understanding Node's Event Loop](https://www.builder.io/blog/visual-guide-to-nodejs-event-loop) Vishwas Gopinath [Where to Host Your Remix App in 2023](https://www.jacobparis.com/content/where-to-host-remix) Jacob Paris 🛠 Code & Tools [![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60/mo5igrn7pklgbbc0mi4v.jpg)](https://github.com/piscinajs/piscina) [Piscina 4.0: A Fast Worker Thread Pool Implementation](https://github.com/piscinajs/piscina) — Node’s [worker threads](https://nodejs.org/api/worker_threads.html) bring true multithreading to Node apps and Piscina is a _pool_ for tracking and controlling the number of such threads. Piscina [Dynaboard: AI Meets Low-Code to Get More Done, Faster](https://dynaboard.com/?utm_source=cooperpress-nw&utm_medium=email&utm_campaign=ai-q22023) — Build high performance authenticated web applications in a collaborative — full-stack — development environment. Dynaboard sponsor [Chardet: Character Encoding Detection Library](https://github.com/runk/node-chardet) — It sounds like a French wine, but actually uses statistical methods to determine the most likely encoding of a supplied buffer, string, or file, from a selection of [about 30](https://github.com/runk/node-chardet#supported-encodings). Dmitry Shirokov [MariaDB Node.js Connector: A MariaDB/MySQL Client](https://github.com/mariadb-corporation/mariadb-connector-nodejs) — An official async MariaDB client. Offers advanced features like insert streaming, pipelining and Ed25519 auth support. MariaDB 🙂 [Node-Emoji: Simple Emoji Functions for Node](https://github.com/omnidan/node-emoji) — You get methods like `emoji.emojify`, `unemojify` and `find` to help you work with emojis and English representations of them. Supports ESM and recently rewritten to TypeScript. Daniel Bugl [Toad Scheduler: In-Memory Node _and_ Browser Job Scheduler](https://github.com/kibertoad/toad-scheduler) — Provides a little more structure than `setTimeout` or `setInterval` and supports cron-style scheduling too. Igor Savin [openGraphScraper: Open Graph and Twitter Card Metadata Scraper](https://github.com/jshemas/openGraphScraper) — A lot of Web pages contain metadata to help social networks like Facebook and Twitter create more attractive looking links to them – this library lets _you_ dig more easily into this info for yourself. Josh Shemas - [Nest 10.0](https://github.com/nestjs/nest) – Popular progressive framework for building scalable, enterprise-grade apps. - [BBC SQS-Consumer 7.2](https://github.com/bbc/sqs-consumer) – Build AWS Simple Queue Service (SQS) based apps without the boilerplate. - [Commander.js 11.0](https://github.com/tj/commander.js) – CLI app toolkit. - [Limdu 1.0](https://github.com/erelsgl/limdu) – Machine learning for Node. - [lru-cache 10.0](https://github.com/isaacs/node-lru-cache) ↳ A cache that deletes the least recently used items. - [Mongoose 7.3](https://github.com/Automattic/mongoose) ↳ Popular MongoDB object modeling library. - [ssh2 1.14](https://github.com/mscdex/ssh2) ↳ Pure JS SSH2 client and server modules. - [ics 3.2](https://github.com/adamgibbons/ics) ↳ iCalendar (ics) file generation. 💻 Jobs [Find Tech Jobs with Hired](https://hired.com/join/?utm_source=newsletter&utm_medium=sponsor&utm_campaign=%28b2c%29%28l-all%29%28r-all%29%28cooper-nodeweekly%29&utm_content=find-your-next-job) — Hired makes job hunting easy-instead of chasing recruiters, companies approach you with salary details up front. Create a free profile now. Hired **Got a link for us?** Reply and tell us. We can't include everything but we'll look at anything you send. _Thanks!_ --- **Sponsorship:** Email `[kristina@cooperpress.com](mailto:kristina@cooperpress.com)` for details. --- Published by Cooper Press Ltd. Fairfield Enterprise Centre, Louth, LN11 0LS, United Kingdom [Cancel your subscription](https://nodeweekly.com/leave/*|UID|*) or [change your address](https://nodeweekly.com/edit_subscription/*|UID|*).