--- title: "Tough cookies" publication: "Node Weekly" issue: 548 published_at: "2024-09-17" canonical_url: "https://nodeweekly.com/issues/548" --- Plus MongoDB and Express updates, and a plea to Larry Ellison, the toughest cookie of all. | #​548 — September 17, 2024 [Read on the Web](https://nodeweekly.com/issues/548) Together with [![Memetria\](https://res.cloudinary.com/cpress/image/upload/c_fill,g_auto,w_600,h_145/e_make_transparent/co_white,e_outline:7/vvpdctzacmq3xehpvwps.png)](https://dashboard.memetria.com/nodeweekly/) ![Node.js Weekly](https://res.cloudinary.com/cpress/image/upload/v1653576619/lgfqinzbdqttwmhvljxb.png) [![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60,q_auto/chhhi3uqobgkgrgxiuak.jpg)](https://github.com/sindresorhus/nano-spawn) [nano-spawn: Tiny Execa-Inspired Process Execution](https://github.com/sindresorhus/nano-spawn) — If you’re familiar with Sindre’s powerful [Execa](https://github.com/sindresorhus/execa) for running commands from a Node app in a robust manner, `nano-spawn` offers its core functionality [in a smaller package](https://github.com/sindresorhus/execa/blob/main/docs/small.md) and remains a better option than `child_process` in any case. Sindre Sorhus and ehmicky 💡 But if you prefer the 'full fat' experience of Execa, [v9.4.0 was released](https://github.com/sindresorhus/execa/releases/tag/v9.4.0)yesterday. ▶[From Node.js to Deno: How It All Began](https://www.youtube.com/watch?v=zxitJn9MwYs) — A brief nine minute documentary exploring the origins of [Deno](https://deno.com/) with Ryan Dahl and Bert Belder. A good, quick way to get up to speed with the motivations behind the alternative JavaScript runtime. Honeypot [![\](https://copm.s3.amazonaws.com/18aae305.png)](https://dashboard.memetria.com/nodeweekly/) [Memetria: Redis Hosting for Serious Developers](https://dashboard.memetria.com/nodeweekly/) — Memetria provides secure, scalable hosting with features that enhance your development experience, including large key tracking and detailed performance metrics. Keep your production apps fast with better and uptime. Memetria sponsor [JavaScript™: A Plea for Oracle to Release the JavaScript Trademark](https://javascript.tm/) — It’s long been a bone of contention in the JavaScript community that Oracle owns the JavaScript trademark, but this marks the first truly serious effort to try and change that. Join the effort by ‘signing’ this open letter, if you agree. The JavaScript Community **IN BRIEF:** - 📗 [The Node.js Reference Architecture](https://developers.redhat.com/blog/2021/03/08/introduction-to-the-node-js-reference-architecture-part-1-overview) is a compendium of knowledge and practices built up within Red Hat and IBM to help teams make good decisions when building Node.js apps. It's [now also available in e-book form](https://developers.redhat.com/e-books/developers-guide-nodejs-reference-architecture) (Red Hat login needed). - 📊 [An interesting spreadsheet of 5000 npm packages](https://docs.google.com/spreadsheets/d/1oYJxQgMA7lQ6-wNaBKNNDz6vr3Yaa1EDsI_Hakr4ROg/edit?gid=1891857584#gid=1891857584) ranked by package size, weekly downloads, and traffic. Amazingly, one package is responsible for 278 terabytes of traffic per week. - [Eleventy (a.k.a. 11ty)](https://www.11ty.dev/) is a popular Node-powered static site generator and [the project is now joining _Font Awesome._](https://www.11ty.dev/blog/eleventy-font-awesome/) 📄 [A GitHub Trick to Find the Commit That Deleted a File](https://devblogs.microsoft.com/oldnewthing/20240909-00/?p=110234) Raymond Chen 📄 [Top 5 HTTP Request Libraries for Node.js](https://blog.appsignal.com/2024/09/11/top-5-http-request-libraries-for-nodejs.html) Damilola Olatunji 🛠 Code & Tools [![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60,q_auto/w8oxudbm9vjwzdjc3tah.jpg)](https://github.com/paulmillr/chokidar) [Chokidar 4.0: Efficient Cross-Platform File Watching Library](https://github.com/paulmillr/chokidar) — Wraps around `fs.watch` / `fs.watchFile` and normalizes the events received, applies some best practices, and presents an API that works the same across different platforms. Paul Miller 🗓️ [ViteConf is October 3rd!](https://viteconf.org/?utm_source=node&utm_medium=secondary) — StackBlitz is r(ai)sing the bar in the ViteConf '24 keynote. You won’t want to miss it 👀. StackBlitz sponsor 🍪🔒 [tough-cookie 5.0: RFC6265 Cookies and CookieJar for Node](https://github.com/salesforce/tough-cookie) — A long standing library from Salesforce, now with a major update. [v5.0](https://github.com/salesforce/tough-cookie/discussions/452) includes a move to TypeScript, as well as some API changes. Salesforce [Biome v1.9 Released; Turns One Year Old](https://biomejs.dev/blog/biome-v1-9/) — Biome [started life](https://biomejs.dev/blog/annoucing-biome/) as a fork of Rome, a bold attempt to create an all-in-one ‘frontend toolchain’. As of v1.9, Biome can format and lint CSS, GraphQL, _and_ JavaScript, does it _very_ quickly, yet has [97% compatibility with Prettier.](https://console.algora.io/challenges/prettier) Victorien Elvinger & Biome Core Team [FarmHash 4.0: Node Implementation of Google's High Performance Hash Functions](https://github.com/lovell/farmhash) — [FarmHash](https://github.com/google/farmhash) is a family of non-cryptographic hash functions built by Google mostly for quickly hashing strings. Lovell Fuller [hot-shots: A Node Client for StatsD, DogStatsD, and Telegraf](https://github.com/brightcove/hot-shots) — Originally a turbo-charged, modernized fork of [node-statsd](https://github.com/sivy/node-statsd). Brightcove - 🥬 [MongoDB Node.js Driver 6.9](https://github.com/mongodb/node-mongodb-native/releases/tag/v6.9.0) – The latest official MongoDB driver. It gets ready for [MongoDB 8.0](https://www.mongodb.com/resources/products/mongodb-version-history), adds support for explicit resource management, and MongoDB 3.6 support is deprecated. - [Express.js 4.21](https://github.com/expressjs/express/releases/tag/4.21.0) – Last week, we featured [Express.js 5.0](https://github.com/expressjs/express/releases/tag/v5.0.0) but the 4.x branch continues to get updates. - 🗓️ [date-fns 4.0](https://blog.date-fns.org/v40-with-time-zone-support/) – Modern JavaScript date utility library, now with first-class timezone support. - [Middy 5.5](https://github.com/middyjs/middy) – Node.js middleware engine for AWS Lambda. - [serve-static 2.1](https://github.com/expressjs/serve-static) – A quick way to serve static files from Node. - [Node-SSH 1.16](https://github.com/mscdex/ssh2) – Pure JS SSH2 client and server modules. - [Mikro ORM 6.3.10](https://github.com/mikro-orm/mikro-orm) – Popular ORM for TypeScript & Node. - [Wretch 2.10](https://github.com/elbywan/wretch) – Tiny, fluent wrapper built around`fetch`. - [milliparsec 4.0](https://github.com/tinyhttp/milliparsec) – _"Tiniest body parser in the universe."_ **Got a link for us?** Reply and tell us. We can't include everything but we'll look at anything you send. _Thanks!_ --- **Sponsorship:** Email `[kristina@cooperpress.com](mailto:kristina@cooperpress.com)` for details. --- Published by Cooper Press Ltd. Fairfield Enterprise Centre, Louth, LN11 0LS, United Kingdom [Cancel your subscription](https://nodeweekly.com/leave/*|UID|*) or [change your address](https://nodeweekly.com/edit_subscription/*|UID|*).