--- title: "Another way to look inside your npm packages" publication: "Node Weekly" issue: 569 published_at: "2025-03-11" canonical_url: "https://nodeweekly.com/issues/569" --- Plus Bun boosts Node-API compatibility, and Node's new End-of-Life CVE approach. | #​569 — March 11, 2025 [Read on the Web](https://nodeweekly.com/issues/569) Together with [![Frontend Masters logo\](https://res.cloudinary.com/cpress/image/upload/c_fill,g_auto,w_300,h_70/e_make_transparent/co_white,e_outline:5/nk0tfdvalivacz8rw7rt.png)](https://frontendmasters.com/courses/developer-productivity-v2/?utm_source=email&utm_medium=nodeweekly&utm_content=devprodv2) ![Node.js Weekly](https://res.cloudinary.com/cpress/image/upload/v1653576619/lgfqinzbdqttwmhvljxb.png) [![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60,q_auto/muxdaqzalo2c05hdmmld.jpg)](https://node-modules.dev/) 🔎 [Node Modules Inspector](https://node-modules.dev/) — A tool that runs pnpm _inside your browser_, “installs” a package, then analyzes its dependencies. This can be useful for analyzing packages you already use, but also for simplifying your own projects, as [11ty’s Zach Leatherman did here.](https://bsky.app/profile/zachleat.com/post/3ljleqm7tsk2p) Anthony Fu [Node Added TypeScript Support, But What Does That Mean for Deno?](https://deno.com/blog/typescript-in-node-vs-deno) — The Deno team, learning from previous experiences with Node, went ‘all in’ with TypeScript from day one. Now, Node can work with TypeScript too, but the experience is still very different, and the Deno team explains how here. Andy Jiang and Ryan Dahl [![\](https://res.cloudinary.com/cpress/image/upload/c_limit,w_480,h_480,q_auto/copm/a0dc67fb.png)](https://frontendmasters.com/courses/developer-productivity-v2/?utm_source=email&utm_medium=nodeweekly&utm_content=devprodv2) [ThePrimeagen's Dev Setup Is Better Than Yours](https://frontendmasters.com/courses/developer-productivity-v2/?utm_source=email&utm_medium=nodeweekly&utm_content=devprodv2) — See why simpler dev tooling is better by hand-crafting an environment with bash scripts. You'll learn common Unix tools for managing libraries, interacting with the OS, window management, and more in this course. Frontend Masters sponsor [Updates on CVE for End-of-Life Versions](https://nodejs.org/en/blog/vulnerability/updates-cve-for-end-of-life) — Back in January, the Node.js project decided to [issue CVEs for end-of-life versions of Node](https://nodejs.org/en/blog/vulnerability/upcoming-cve-for-eol-versions) to warn people of the security impacts of using old versions of Node. This [didn’t go down well](https://socket.dev/blog/node-js-eol-versions-cve-dubbed-the-worst-cve-of-the-year) and so the Node project has a new plan going forward. Rafael Gonzaga **IN BRIEF:** - Alternative JS runtime [Bun v1.2.5 has been released](https://bun.sh/blog/bun-v1.2.5) with _"much better Node-API compatibility."_ An 'almost' total rewrite of Bun's Node-API implementation now means more Node-API powered modules will work with Bun. - A North Korean group of hackers is [continuing with its attempts to poison the npm ecosystem](https://socket.dev/blog/lazarus-strikes-npm-again-with-a-new-wave-of-malicious-packages) with nefarious packages. - Heroku user? [Heroku now has an official VS Code extension](https://blog.heroku.com/heroku-extension-visual-studio-code-now-generally-available) for managing your denos and even doing dynos right from the editor. 📄 ["Everything I Was Lied to About Node.js Came True with Elixir"](https://d-gate.io/blog/everything-i-was-lied-to-about-node-came-true-with-elixir) – Sometimes we like to check in with people who decided Node wasn’t for them and let’s just say.. Dylan wasn’t a fan. Dylan Moore 📄 [How to Troubleshoot Node.js Images in OpenShift](https://developers.redhat.com/articles/2025/03/05/how-troubleshoot-nodejs-images-openshift) Francisco De Melo Junior (Red Hat) 📄 [Seven Best Practices of File Uploads with JavaScript](https://storagebowl.net/blogs/best-practices-of-file-upload) StorageBowl 🛠 Code & Tools [![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60,q_auto/joj0qwvxmxeoxyluzcos.jpg)](https://github.com/electric-sql/pglite) [PGlite: Run Postgres in WebAssembly](https://github.com/electric-sql/pglite) — PGlite packages a WASM build of Postgres into a TypeScript library that can be run directly from Node.js (or Bun, Deno, and even the browser) and it’s only a few megabytes in size. ElectricSQL / Neon [Electron 35.0: The Cross-Platform Desktop App Toolkit](https://www.electronjs.org/blog/electron-35-0) — You can now attach a preload script to Service Workers. Dependencies are also bumped to Chromium 134 and Node 22.14. Electron Team [Small Teams Need Paas-Ops, Not DevOps](https://judoscale.com/blog/small-teams-need-paas-ops-not-devops?utm_source=node-weekly&utm_campaign=passops) — How to skip the complexity and rabbit holes of DevOps, and instead focus on shipping your product fast. Judoscale sponsor [zx 8.4.0: A Tool for Writing Better Scripts](https://github.com/google/zx/releases/tag/8.4.0) — A minor bump for a package that sweetens the process of using Node for shell scripting tasks. If it’s new to you, [these docs will give you the idea.](https://google.github.io/zx/getting-started) Google [Systeminformation: A System Information Library for Node](https://github.com/sebhildebrandt/systeminformation) — If you want to query what environment your Node program is running in, this is for you. Get info about audio devices, Bluetooth devices, printers, USB, CPU, architecture, wifi, and more. Sebastian Hildebrandt - [node-mysql2 3.13](https://github.com/sidorares/node-mysql2) – Fast MySQL driver. Now with _Cloudflare Workers_support. - [Nightwatch.js 3.12](https://github.com/nightwatchjs/nightwatch) – Node.js end-to-end testing framework. - [pg-promise 11.11](https://github.com/vitaly-t/pg-promise) – Postgres interface for Node.js. - [TIFF 6.2](https://github.com/image-js/tiff) – Pure JS TIFF image decoder. 📰 Classifieds ⚙️ Kubernetes and Node.js don’t always get along. [We explored the intersection of K8s & Node](https://blog.platformatic.dev/how-to-make-kubernetes-and-nodejs-microservices-a-perfect-match)—why it works, where it doesn’t & how to make the most of it. --- 🛠️ [Debugging Workshop:](https://sentry.io/resources/instrument-monitor-fix-workshop/?utm_medium=paid-community&utm_source=nodeweekly&utm_campaign=fy26q1-workshop&utm_content=workshop-register) Build, Break, Fix. Develop your troubleshooting abilities with real-world examples and hands-on practice. --- 📸 **From Image to Insights** – Upload a photo, get a license plate decoded. Our **Plate Image Recognition API** does it fast and accurately. [Try CarsXE Now!](https://api.carsxe.com/vehicle-plate-recognition?utm_source=Cooper+Press&utm_medium=email&utm_campaign=Cooper-press-mar-11) 📢 Elsewhere in JavaScript A quick roundup of some of other interesting stories in the broader JavaScript landscape, in case you've missed them: - The _HTTP Archive_ released [the mammoth 'JavaScript' chapter](https://almanac.httparchive.org/en/2024/javascript) of its latest _Web Alamanac._ It takes a quantitative look at the use of JavaScript across the modern Web, touching on how much JavaScript most pages use (too much?), tool usage, TypeScript popularity, Web Worker use (higher than you'd think), and more. - Still not convinced by TypeScript? [Dr. Axel Rauschmayer has a 'sales pitch' for you.](https://2ality.com/2025/03/typescript-sales-pitch.html) If _anyone_ could convince me, it's him! - 🗓️ [endoflife.date](https://endoflife.date/) is a handy, updated source of 'end-of-life' dates for hundreds of open source projects, including [Angular](https://endoflife.date/angular), [Node.js](https://endoflife.date/nodejs), and [Vue.](https://endoflife.date/vue) A great resource. - [Dive into WebGPU](https://okaydev.co/articles/dive-into-webgpu-part-1) is a fantastic four part series on using the Web's most modern graphics API for creating striking visual effects. **Got a link for us?** Reply and tell us. We can't include everything but we'll look at anything you send. _Thanks!_ --- **Sponsorship:** Email `[kristina@cooperpress.com](mailto:kristina@cooperpress.com)` for details. --- Published by Cooper Press Ltd. Fairfield Enterprise Centre, Louth, LN11 0LS, United Kingdom [Cancel your subscription](https://nodeweekly.com/leave/*|UID|*) or [change your address](https://nodeweekly.com/edit_subscription/*|UID|*).