--- title: "The latest npm registry shenanigans" publication: "Node Weekly" issue: 516 published_at: "2024-01-09" canonical_url: "https://nodeweekly.com/issues/516" --- Plus MikroORM 6.0, a visual way to look at dependencies, and another boilerplate option. | #​516 — January 9, 2024 [Read on the Web](https://nodeweekly.com/issues/516) Together with [![Frontend Masters logo\](https://res.cloudinary.com/cpress/image/upload/c_fill,g_auto,w_300,h_70/e_make_transparent/co_white,e_outline:5/nk0tfdvalivacz8rw7rt.png)](https://frontendmasters.com/learn/typescript/?utm_source=email&utm_medium=nodeweekly&utm_content=typescript) ![Node.js Weekly](https://res.cloudinary.com/cpress/image/upload/v1653576619/lgfqinzbdqttwmhvljxb.png) [![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60,q_auto/vadh0adgj2zjsajj2hag.jpg)](https://socket.dev/blog/when-everything-becomes-too-much) [When 'Everything' Becomes Too Much: Fresh npm Package Chaos](https://socket.dev/blog/when-everything-becomes-too-much) — While many of us were taking a break, some folks published an '`everything`' package that depended upon _all_ public npm packages, resulting in millions of transitive dependencies. This caused.. _some problems._ One of the folks involved also [shared the story from behind the scenes](https://uncenter.dev/posts/npm-install-everything/). Feross Aboukhadijeh (Socket) [The State of Benchmarking in Node.js](https://www.webpro.nl/articles/the-state-of-benchmarking-in-nodejs) — While Node has always been fast (_thanks largely to its V8 underpinnings_), there’s a renewed focus on performance in the face of benchmarks and claims from alternatives like Deno and Bun. Lars looks at the ecosystem of benchmarking options in the space. Lars Kappert ⚡️ Talking of speed, Node performance expert Yagiz Nizipli shares a look at [making improvements to Node's loader performance.](https://sentry.engineering/blog/improving-nodejs-loader-performance) [![\](https://copm.s3.amazonaws.com/1a9a3e75.png)](https://frontendmasters.com/learn/typescript/?utm_source=email&utm_medium=nodeweekly&utm_content=typescript) [New TypeScript Courses: Take the Learning Path](https://frontendmasters.com/learn/typescript/?utm_source=email&utm_medium=nodeweekly&utm_content=typescript) — Join Mike North (Tech Lead at Stripe) for this series of brand new TypeScript courses. You'll get hands-on practice covering both the fundamentals and advanced features like utility types and advanced generics. Learn best practices to configure and evolve your TS codebase! Frontend Masters sponsor [MikroORM 6: The _Polished_, Flexible ORM](https://mikro-orm.io/blog/mikro-orm-6-released) — After over a year in development, MikroORM 6 is stable. It’s a TypeScript-based ORM, based around Data Mapper, Unit of Work and Identity Map patterns, with support for MongoDB, MySQL, Postgres, and SQLite. v6 adds strict partial loading, cursor-based pagination, reworked support for raw SQL fragments, an all-new [Getting Started guide](https://mikro-orm.io/docs/guide), plus many other DX-focused improvements. Martin Adámek _IN BRIEF:_ - The [2023 JavaScript Rising Stars](https://risingstars.js.org/2023/en) is a roundup of the JavaScript projects that did the best on GitHub over the past year. The [back-end/full-stack section](https://risingstars.js.org/2023/en#section-nodejs-framework) is worth a browse to get a feel for how things are going here. - The V8 team ended 2023 with [a look at how V8 is 'faster and safer than ever.'](https://v8.dev/blog/holiday-season-2023) The project has continued to advance, deliver more performance, and more is on the way... - In 'other backend runtime' news, [Deno 1.39](https://deno.com/blog/v1.39) landed with re-enabled WebGPU support, and _Bun_ has continued to get releases at an incredible pace, most recently with [Bun v1.0.21](https://bun.sh/blog/bun-v1.0.21) which adds `console.table` support. - Supabase's _Edge Functions_ platform [now supports](https://supabase.com/blog/edge-functions-node-npm) npm modules and Node's built‑in APIs. - A thorough [list of JS engines, runtimes and interpreters](https://gist.github.com/guest271314/bd292fc33e1b30dede0643a283fadc6a). [Learn How to Convert Your Cron into a Schedule with Temporal](https://t.mp/3NQ9Xio) — Converting Cron jobs to Temporal Schedules in the UI of your choice is very simple. See an example in our TypeScript SDK. Temporal Technologies sponsor [The Complete Playwright Cheatsheet](https://proxiesapi.com/articles/the-complete-playwright-cheatsheet) — Covers the basic operations involved in automating Chromium, Firefox or WebKit from Node. When we linked to the author’s [Puppeteer cheatsheet](https://proxiesapi.com/articles/the-complete-puppeteer-cheatsheet), we wondered when the Playwright one might arrive. _Now_, it seems :-) Mohan Ganesan 🛠 Code & Tools [![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60,q_auto/rsna6jm9xdsacae1x4e9.jpg)](https://github.com/sverweij/dependency-cruiser) [Dependency Cruiser 16.0: A Way to Visualize Dependencies](https://github.com/sverweij/dependency-cruiser) — If you want a look at the output without running it for yourself, there’s [a whole page of graphs for popular, real world projects](https://github.com/sverweij/dependency-cruiser/blob/develop/doc/real-world-samples.md) including Chalk and Yarn. Might be an option if you're looking to create a fun poster for your office wall..? 😆 Sander Verweij [Node Boilerplate 2.0: A Skeleton for Express Microservices](https://github.com/santoshshinde2012/node-boilerplate) — There's a few projects like this, but Santosh has clearly put effort into maintaining this one, which provides a quick, opinionated starting point for building Web services with Node, Express, TypeScript, along with some initial tests too. Santosh Shinde [Nodemon 3: Monitor and Restart a Node App on Changes](https://nodemon.io/) — A long-standing, classic tool: _“Swap nodemon instead of node to run your code, and now your process will automatically restart when your code changes.”_ Remember, though, that [Node now has a built in `--watch` mechanism](https://www.jamesqquick.com/blog/using-node-watch-instead-of-nodemon/) which may be enough for your needs. Remy Sharp [Oxlint: A New High Performance JS Linter](https://oxc-project.github.io/blog/2023-12-12-announcing-oxlint.html) — Designed to catch erroneous or useless code in zero-config fashion, Oxlint pitches itself against ESLint in terms of performance (claiming to be '50-100 times faster') while conceding it's not a _full_replacement. Boshen 🕵️ [Secretlint: A Linter to Prevent Committing Credentials](https://github.com/secretlint/secretlint) — While many services, including GitHub, now [detect the accidental sharing of secrets](https://docs.github.com/en/code-security/secret-scanning/about-secret-scanning#about-secret-scanning-alerts-for-users) and credentials and even revoke those tokens, it’s better if they’re not in your repo in the first place. This can be used on an adhoc basis or in your CI. Secretlint [jsvu 2.2: JavaScript (Engine) Version Updater](https://github.com/GoogleChromeLabs/jsvu) — A tool for installing new JavaScript engines (on macOS, Linux and Windows) without compiling them from source. Google [c8 v9.0: Output Coverage Reports using Node's Built in Coverage](https://github.com/bcoe/c8) — Code-coverage using Node's built-in functionality, that’s compatible with Istanbul’s reporters. Benjamin E. Coe 📰 Classifieds 🐘 Learn how [Epsio's](https://docs.epsio.io?utm_source=node9) Streaming SQL Engine boosts the performance of your most complex queries! [Learn more](https://docs.epsio.io?utm_source=node9). --- 👉 [Free Temporal 101 & 102 Courses in TypeScript](https://t.mp/3TaiQ9Z): Learn Temporal's open source key concepts and best practices with our self-paced training. - [Dynamoose 4.0](https://github.com/dynamoose/dynamoose) – Mongoose-inspired DynamoDB modelling. - [node-mysql2 3.7](https://github.com/sidorares/node-mysql2) – Fast MySQL driver. Now with [nice online docs](https://sidorares.github.io/node-mysql2/docs). - [DOCX 8.5](https://docx.js.org/#/) – Generate .docx/Word files from JS/TS. - [TestCafe 3.5](https://github.com/DevExpress/testcafe/releases/tag/v3.5.0) – Automated end-to-end web testing framework. - [Awilix 10.0](https://github.com/jeffijoe/awilix) – Inversion of Control (IoC) container for Node. - [getmac 6.6](https://github.com/bevry/getmac) – Get the MAC address of the current machine. - [Chai 4.4](https://github.com/chaijs/chai/releases/tag/v5.0.0) – BDD / TDD assertion framework. Now ESM only. - [htmlparser2 9.1](https://github.com/fb55/htmlparser2) – A fast and forgiving HTML/XML parser. - [rpc-websockets 7.9](https://github.com/elpheria/rpc-websockets) – JSON-RPC 2.0 over WebSockets. - [node-geo-tz 8.0](https://github.com/evansiroky/node-geo-tz) – Geographical timezone lookup. - [Umzug 3.5](https://github.com/sequelize/umzug) – Framework agnostic migration tool. **Got a link for us?** Reply and tell us. We can't include everything but we'll look at anything you send. _Thanks!_ --- **Sponsorship:** Email `[kristina@cooperpress.com](mailto:kristina@cooperpress.com)` for details. --- Published by Cooper Press Ltd. Fairfield Enterprise Centre, Louth, LN11 0LS, United Kingdom [Cancel your subscription](https://nodeweekly.com/leave/*|UID|*) or [change your address](https://nodeweekly.com/edit_subscription/*|UID|*).