--- title: "An open SaaS boilerplate app" publication: "Node Weekly" issue: 520 published_at: "2024-02-06" canonical_url: "https://nodeweekly.com/issues/520" --- Plus how to build good CLI apps, delayed security releases, and Deno v1.40. | #​520 — February 6, 2024 [Read on the Web](https://nodeweekly.com/issues/520) Together with [![Frontend Masters logo\](https://res.cloudinary.com/cpress/image/upload/c_fill,g_auto,w_300,h_70/e_make_transparent/co_white,e_outline:5/nk0tfdvalivacz8rw7rt.png)](https://frontendmasters.com/courses/blazingly-fast-js/?utm_source=email&utm_medium=nodeweekly&utm_content=blazinglyfastjs) ![Node.js Weekly](https://res.cloudinary.com/cpress/image/upload/v1653576619/lgfqinzbdqttwmhvljxb.png) [![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60,q_auto/jts6ynhkcrxfpsdtnnxp.jpg)](https://wasp-lang.dev/) [Wasp: A Rails-Like Framework for React, Node and Prisma](https://wasp-lang.dev/) — A common complaint I’ve seen about the Node ecosystem on social media is the lack of a ‘big framework’. This seems unfair with [Sails](https://sailsjs.com/) and [AdonisJS](https://adonisjs.com/) providing at least two options, but Wasp is another compelling option that even refers to itself as _Rails-like._ There’s a lot to like, particularly with the release of [the _‘Open SaaS’_ SaaS starter app](https://wasp-lang.dev/blog/2024/01/30/open-saas-free-open-source-starter-react-nodejs) that can take you several steps down the road to building an app in minutes. Wasp, Inc. [![\](https://copm.s3.amazonaws.com/2c772732.png)](https://frontendmasters.com/courses/blazingly-fast-js/?utm_source=email&utm_medium=nodeweekly&utm_content=blazinglyfastjs) [Learn Advanced JavaScript Performance Optimization](https://frontendmasters.com/courses/blazingly-fast-js/?utm_source=email&utm_medium=nodeweekly&utm_content=blazinglyfastjs) — Garbage collection, memory profiling, data structures like sets and arrays, and event loop management. Learn performance-driven programming, preparing you to write blazingly fast and efficient code! Frontend Masters sponsor [Malicious npm Package Targeting Roblox Users for Data Theft](https://socket.dev/blog/malicious-npm-package-masquerades-as-noblox-js) — It feels like we need an ‘evil package of the week’ feature lately. This latest one targeted users of a package for interacting with the _Roblox_ (a popular virtual universe game) API. The post digs into detail on what the rogue package was doing behind the scenes. Sarah Gooding (Socket) 👾 Separate from the malicious package discussed above, the legitimate [Noblox.js package](https://www.npmjs.com/package/noblox.js) is worth a look if you want to interact with Roblox from Node at all. _IN BRIEF:_ - 🚨 [A raft of Node.js security releases were due today](https://nodejs.org/en/blog/vulnerability/february-2024-security-releases) but these have been pushed back to this Thursday, February 8. - The [latest release of Deno (v1.40)](https://deno.com/blog/v1.40) introduces support for the [Temporal API](https://tc39.es/proposal-temporal/docs/) and the latest [decorator syntax proposal.](https://github.com/tc39/proposal-decorators) [Command Line Interface Guidelines](https://clig.dev/) — A fantastically presented ‘open source guide’ to writing better command line programs in the time-tested UNIX-y way. There's much to enjoy here, including a few Node-specific recommendations. Prasad, Firshman, Tashian, and Parish 💡 On the topic of CLIs, [version 12.0](https://github.com/tj/commander.js/releases/tag/v12.0.0) of popular full-featured CLI framework [Commander.js](https://github.com/tj/commander.js) has just been released. [Effortless GraphQL with Hasura and TypeScript Functions](https://hasura.io?utm_source=newsletter&utm_medium=email&utm_campaign=node-weekly) — Connect to your data sources, generate a GraphQL API, and deploy globally — instantly. Want to write and use TypesScript functions directly in your GraphQL API? With Hasura, you can. [Check it out](https://github.com/hasura/ndc-typescript-deno). Hasura sponsor [How to Stream Files from Next.js Route Handlers](https://www.ericburel.tech/blog/nextjs-stream-files) — _“Despite being Next.js specific, it goes over the philosophical difference between Node.js specific API routes, and runtime-agnostic route handlers, which I think could be interesting to a broader audience of backend JS developers.”_ Eric Burel [Topic Classification from Node with Astra Vector Search](https://thecodebarbarian.com/topic-classifiers-in-nodejs-using-astra-vector-search.html) — An example of using Node to crunch some data and pipe it into Datastax’s [Astra vector database](https://www.datastax.com/products/datastax-astra) (using Mongoose and a JSON API driver) for querying. Valeri Karpov 🛠 Code & Tools [Marked.js 12.0: Fast Markdown Parsing and Compiling](https://marked.js.org/) — A low-level Markdown compiler built for speed and available as a client-side library, server-side library, or via a CLI. v12 adjusts things in line with [recent updates](https://spec.commonmark.org/0.31.2/changes.html) to the CommonMark spec. Christopher Jeffrey 🐱 [Meow 13.2: A Straightforward CLI App Helper](https://github.com/sindresorhus/meow) — You define flags, help text, and other features in a single object and it handles all the processing for you. Short, simple, sweet, and no dependencies. Sindre Sorhus [merge-streams: Merge Multiple Streams Into a Unified One](https://github.com/sindresorhus/merge-streams) — It’s as simple as `mergeStreams([streamA, streamB])`... Sindre Sorhus 📰 Classifieds 🪝Reliably receive, authenticate, transform, filter, route, & deliver webhooks at scale with Hookdeck. [Try the receiving webhooks quickstart](https://hookdeck.com/docs/receive-webhooks?lang=nodejs&ref=520). --- 🧑‍💻 Porkbun has low prices on domain names, powerful hosting plans, and amazing support 365 days a year. [Get $1 off your next domain now](https://sponsr.is/tld_nodeweekly)! [Neutralinojs 5.0: Alternative Cross-Platform Desktop App Approach](https://neutralino.js.org/docs/release-notes/framework/#v500) — [Neutralinojs](https://neutralino.js.org/) offers an interesting lightweight alternative to something like Electron, as it still lets you build apps that run on Linux, Windows and macOS, but Chromium isn’t bundled – instead the existing installed browser engine is used. CodeZri [pkg-tools 1.0: An Opinionated Build Toolchain with Typed Configuration](https://github.com/pkg-tools/pkg-tools) — A thin abstraction on top of the [unbuild](https://github.com/unjs/unbuild) build system that centralizes your build config and helps consistently build packages supporting both CJS and ESM. Joe McKenney - [Mikro ORM 6.1](https://github.com/mikro-orm/mikro-orm/releases/tag/v6.1.0) – TypeScript ORM for Node.js. - [query-string 8.2](https://github.com/sindresorhus/query-string) – Parse and stringify URL query strings. - [better-sqlite 9.4](https://github.com/WiseLibs/better-sqlite3) – Neat way to use SQLite (3.45.1) from Node. - [nvm-desktop 3.0](https://github.com/1111mp/nvm-desktop) – Electron-powered Node version manager for the desktop. - [xero-node 5.0](https://github.com/XeroAPI/xero-node) – Node SDK for the popular _Xero_ accounting system. - [gaxios 6.2](https://github.com/googleapis/gaxios) – HTTP client that's Axios-like but over `node-fetch`. - [js-bson 6.3](https://github.com/mongodb/js-bson/releases/tag/v6.3.0) – MongoDB BSON parser for Node and browsers. - [node-acme-client 5.3](https://github.com/publishlab/node-acme-client) – Simple, unopinionated ACME client. - [Got 14.2](https://github.com/sindresorhus/got) – Human-friendly HTTP request library. - [Pino 8.18](https://github.com/pinojs/pino) – Fast JSON-powered logging. **Got a link for us?** Reply and tell us. We can't include everything but we'll look at anything you send. _Thanks!_ --- **Sponsorship:** Email `[kristina@cooperpress.com](mailto:kristina@cooperpress.com)` for details. --- Published by Cooper Press Ltd. Fairfield Enterprise Centre, Louth, LN11 0LS, United Kingdom [Cancel your subscription](https://nodeweekly.com/leave/*|UID|*) or [change your address](https://nodeweekly.com/edit_subscription/*|UID|*).