--- title: "A snapshot of what's new in Node" publication: "Node Weekly" issue: 536 published_at: "2024-06-18" canonical_url: "https://nodeweekly.com/issues/536" --- Plus cache poisoning, Electron 31, and a way to let regexes timeout. | #​536 — June 18, 2024 [Read on the Web](https://nodeweekly.com/issues/536) Together with [![WorkOS\](https://res.cloudinary.com/cpress/image/upload/c_fill,g_auto,w_514,h_98/e_make_transparent/co_white,e_outline:9/tdfxwgk852ui9leli4wm.png)](https://workos.com/?utm_source=cpnode&utm_medium=newsletter&utm_campaign=q22024) ![Node.js Weekly](https://res.cloudinary.com/cpress/image/upload/v1653576619/lgfqinzbdqttwmhvljxb.png) [![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60,q_auto/aztebf3vpqvagab5mhbf.jpg)](https://nodejs.org/en/blog/release/v22.3.0) [Node v22.3.0 (Current) Released](https://nodejs.org/en/blog/release/v22.3.0) — One of those releases where lots of tiny things have occurred, but little of broad significance, except… [for snapshot testing!](https://nodejs.org/api/test.html#snapshot-testing) Snapshot tests serialize arbitrary values into string values to be compared against a set of pre-built known ‘good’ values (_stored as a ‘snapshot’ representing a desired state_). Rafael Gonzaga [Researchers Uncover npm Registry Vulnerability to Cache Poisoning](https://socket.dev/blog/npm-registry-vulnerability-to-cache-poisoning-and-dos-attacks) — The basic idea is that specific versions of target packages can be targeted to appear as if they are no longer available for brief periods of time. This isn’t a _huge_ vulnerability, but still an important one that GitHub is fixing. Sarah Gooding (Socket) [![\](https://copm.s3.amazonaws.com/e08cbfa2.png)](https://workos.com/?utm_source=cpnode&utm_medium=newsletter&utm_campaign=q22024) [WorkOS: Modern Identity Platform for B2B SaaS](https://workos.com/?utm_source=cpnode&utm_medium=newsletter&utm_campaign=q22024) — Start selling to enterprise customers with just a few lines of code. WorkOS provides flexible, easy-to-use APIs to integrate SSO, SCIM, and RBAC in minutes. It's used by some of the hottest startups in the world including Perplexity, Vercel, & Webflow. WorkOS sponsor [Dual Publishing ESM and CJS Modules with `tsup` and 'Are the Types Wrong'](https://johnnyreilly.com/dual-publishing-esm-cjs-modules-with-tsup-and-are-the-types-wrong) — [tsup](https://github.com/egoist/tsup) makes it easy to bundle TypeScript libraries, and [Are the Types Wrong?](https://arethetypeswrong.github.io/) is a tool to analyze packages for issues with their TypeScript types, particularly ESM-related module resolution issues. John Reilly [What Happens When a Major npm Library Goes Commercial?](https://adventures.nodeland.dev/archive/what-happens-when-a-major-npm-library-goes/) — The [ua-parser-js library](https://github.com/faisalman/ua-parser-js) is commonly used to parse user agent strings and gets over 12 million downloads _a month_, but it has recently switched to AGPL+commercial licensing. Matteo Collina 📰 Classifieds 👨🏾‍💻 Join leaders from Node, Laravel, Prisma, and Supabase for a discussion on backend dev trends with [Sentry on July 16th. RSVP now](https://sentry.io/resources/?utm_medium=paid-community&utm_source=nodeweekly&utm_campaign=fy25q2-roundtable-backend&utm_content=newsletter-roundtable-backend-register). --- 🪝 [Hookdeck](https://hookdeck.com/discover/nodeweekly?ref=nodeweekly-536): a serverless queue for your event-driven applications. [Learn more](https://hookdeck.com/discover/nodeweekly?ref=nodeweekly-536). 📄 [How to Create WebVTT Files for Videos in Node (with AssemblyAI)](https://www.assemblyai.com/blog/vtt-video-nodejs/) – The Web Video Text Tracks Format (WebVTT) is a common standard for subtitles/closed captioning. AssemblyAI’s platform does the hard work here. Niels Swimberghe 📄 [UUIDv7 Implemented in 20 Languages](https://antonz.org/uuidv7/) – Surprisingly short and sweet. Anton Zhiyanov 📄 [Writing Your First Visual Regression Check in Playwright](https://www.checklyhq.com/blog/screenshot-monitoring-with-playwright/) Nočnica Mellifera 📄 [Capturing Garbage Collection Traces in Node Apps](https://coderoasis.com/capturing-nodejs-garbage-collection-traces/) CoderOasis 📄 [Using JSON Schema When Calling Google Gemini](https://www.raymondcamden.com/2024/06/11/using-json-schema-with-google-gemini) Raymond Camden 🛠 Code & Tools [super-regex: Timeout Long Running Regular Expressions](https://github.com/sindresorhus/super-regex) — Many regular expression implementations suffer from so-called [ReDoS](https://en.wikipedia.org/wiki/ReDoS) vulnerabilities, where certain regexes can cause an excessively long evaluation time. `super-regex` introduces the ability to have regexes _timeout_ when they take too long. Sindre Sorhus 💡 `super-regex` just wraps Node's usual regex implementation, but if you can tolerate switching to a different regex engine entirely, [RE2JS](https://github.com/le0pard/re2js) is also worth a look. [Transformational Auth & Identity | Userfront](https://userfront.com/?&utm_source=nodeweekly-com&utm_medium=newsletter_sponsored_link&utm_campaign=magnitude&utm_content=transformational) — "Compared to our previous experiences in the security/auth space, Userfront is an order of magnitude simpler to use." Userfront sponsor [Electron 31.0.0: The Cross Platform Desktop App Framework](https://www.electronjs.org/blog/electron-31-0) — Chromium gets bumped to v126, V8 to v12.6, and Node.js to v20.14.0. [WebSQL](https://en.wikipedia.org/wiki/Web_SQL_Database) support finally gets removed. OpenJS Foundation [Eicrud: A CRUD/Authorization Framework Based on NestJS](https://eicrud.com/) — Extends NestJS / Fastify, and works with MikroORM, CASL and class-validator. [GitHub repo.](https://github.com/eicrud/eicrud) Antoine Crosetti - [Ts.ED 7.72](https://github.com/tsedio/tsed) – Node + TypeScript framework on top of Express. - [pnpm 9.4](https://github.com/pnpm/pnpm/releases/tag/v9.4.0) – The fast, efficiency-focused package manager. - [Fastify 4.28](https://github.com/fastify/fastify) – The fast, low overhead Node web framework. - [ESLint 9.5.0](https://eslint.org/blog/2024/06/eslint-v9.5.0-released/) **Got a link for us?** Reply and tell us. We can't include everything but we'll look at anything you send. _Thanks!_ --- **Sponsorship:** Email `[kristina@cooperpress.com](mailto:kristina@cooperpress.com)` for details. --- Published by Cooper Press Ltd. Fairfield Enterprise Centre, Louth, LN11 0LS, United Kingdom [Cancel your subscription](https://nodeweekly.com/leave/*|UID|*) or [change your address](https://nodeweekly.com/edit_subscription/*|UID|*).