--- title: "Using Node with Cloudflare Workers" publication: "Node Weekly" issue: 594 published_at: "2025-09-30" canonical_url: "https://nodeweekly.com/issues/594" --- Plus a fix to Electron apps causing problems with macOS Tahoe, and AdonisJS turns ten. | #โ€‹594 โ€” September 30, 2025 [Read on the Web](https://nodeweekly.com/issues/594) ๐Ÿ—“๏ธ We're back after taking a week off for my birthday. I've never bothered to do that before, but I figured I'd give it a go, and.. it was good ๐Ÿ˜… We're now back every week until Christmas! __ _Peter Cooper, your editor_ Together with [![Frontend Masters logo\](https://res.cloudinary.com/cpress/image/upload/c_fill,g_auto,w_300,h_70/e_make_transparent/co_white,e_outline:5/nk0tfdvalivacz8rw7rt.png)](https://frontendmasters.com/courses/monorepos-v2/?utm_source=email&utm_medium=nodeweekly&utm_content=monoreposv2) ![Node.js Weekly](https://res.cloudinary.com/cpress/image/upload/v1653576619/lgfqinzbdqttwmhvljxb.png) [![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60,q_auto/re6pyks033vel0nnxouy.jpg)](https://blog.cloudflare.com/nodejs-workers-2025/) [A Year of Improving Node.js Compatibility in _Cloudflare Workers_](https://blog.cloudflare.com/nodejs-workers-2025/) โ€” _โ€œWeโ€™ve been busy,โ€_ says Cloudflare [which recently announced](https://blog.cloudflare.com/bringing-node-js-http-servers-to-cloudflare-workers/) itโ€™s bringing Node.js HTTP server support to its _Workers_ function platform. This post goes _deep_ into the technicalities, covering what areas of the standard library is supported, how the file system works (_Workers_ doesnโ€™t have a typical file system), how input/output streams work, and more. And you can use all of this now. James M Snell (Cloudflare) [Electron-Based Apps Causing System-Wide Lag on macOS 26 Tahoe?](https://github.com/electron/electron/issues/48311) โ€” There were a variety of reports and discussions on social media about system-wide sluggishness caused by changes in a _private_ API in macOS that Electron uses. The good news? The [recently released](https://releases.electronjs.org/) Electron 38.2, 37.6 and 36.9.2 fix the bug, if you maintain an Electron powered app you need to repackage. Various Contributors [![\](https://res.cloudinary.com/cpress/image/upload/c_limit,w_480,h_480,q_auto/copm/9d7fc769.png)](https://frontendmasters.com/courses/monorepos-v2/?utm_source=email&utm_medium=nodeweekly&utm_content=monoreposv2) [Go from Monolith to Monorepo](https://frontendmasters.com/courses/monorepos-v2/?utm_source=email&utm_medium=nodeweekly&utm_content=monoreposv2) โ€” Join Mike North for this course on architecting maintainable, fast and light codebases. You'll learn how to refactor a codebase into a TypeScript monorepo using tools like Nx and Lerna โ€” covering dependencies, formatting, linting, performance and more. Frontend Masters sponsor **IN BRIEF:** - [Node v24.9.0 (Current) has been released](https://nodejs.org/en/blog/release/v24.9.0) โ€“ it's a small release with minor enhancements to `http`, `sqlite`, and`worker`. [Node v22.20 (LTS) was also released](https://nodejs.org/en/blog/release/v22.20.0) focused on updating OpenSSL to v3.5.2. - ๐ŸŽ‚ [AdonisJS](https://adonisjs.com/), a popular full-featured web framework for Node, is [celebrating its tenth birthday.](https://adonisjs.com/blog/a-decade-of-adonisjs-and-the-future) - The latest [State of JS survey is now open](https://survey.devographics.com/en-US/survey/state-of-js/2025) to take. [GitHub's Plan for a More Secure npm Supply Chain](https://github.blog/security/supply-chain-security/our-plan-for-a-more-secure-npm-supply-chain/) โ€” In direct response to the recent npm ecosystem [supply chain attacks](https://socket.dev/blog/ongoing-supply-chain-attack-targets-crowdstrike-npm-packages) of recent weeks, GitHubโ€™s senior director of security research has outlined steps GitHub is taking, including blocking the upload of packages featuring the patterns of the recent malware, hardening package publication, and promoting the use of [trusted publishing.](https://docs.npmjs.com/trusted-publishers) Xavier Renรฉ-Corail (GitHub) ๐Ÿ’ก GitHub has posted [a more technical update](https://github.blog/changelog/2025-09-29-strengthening-npm-security-important-changes-to-authentication-and-token-management/) with a timeline of npm package publishing changes taking place in the coming weeks. [Mastering `npx`: A Cheatsheet for npm and Node Power Users](https://www.nodejs-security.com/blog/mastering-npx-cheatsheet-npm-nodejs-power-users) โ€” Youโ€™ve almost certainly used the `npx` command to easily run a command from an npm package (either local or remote) โ€“ itโ€™s easy to use, but `npx` has a couple of other features and options to keep in mind. Liran Tal ๐Ÿ“„ [Stop Using `.reverse().find()`: Meet `findLast()`](https://allthingssmitty.com/2025/09/22/stop-using-reverse-find-meet-findlast/) Matt Smith ๐Ÿ“„ [Storing Unwise Amounts of Data in JavaScript `BigInt`s](https://jonathan-frere.com/posts/bigints-are-cool/) Jonathan Frere ๐Ÿ“„ [Instrumenting the Node.js Event Loop with eBPF](https://coroot.com/blog/instrumenting-the-node-js-event-loop-with-ebpf/) Nikolay Sivko ๐Ÿ›  Code & Tools [Skia Canvas 3.0: A Canvas Environment for Node](https://skia-canvas.org/) โ€” Based on Googleโ€™s Skia graphics engine and offers end results similar to Chromeโ€™s own canvas. GPU accelerated and can render images, paths, fonts, shapes, etc. [GitHub repo.](https://github.com/samizdatco/skia-canvas) Christian Swinehart [Pompelmi: Scan File Uploads for Malware](https://pompelmi.github.io/pompelmi/) โ€” Provides adapters for Express, Koa, and Next.js to perform fast file-upload malware scanning in Node, including digging into ZIP files and with optional integration with the [YARA malware detection tool.](https://virustotal.github.io/yara/) [GitHub repo.](https://github.com/pompelmi/pompelmi) Tommaso Bertocchi [Catch Bugs in PRs Before They Hit Production](https://sentry.io/product/ai-code-review/?utm_source=nodeweekly&utm_medium=paid-community&utm_campaign=aicodereview-fy26q3-aicodereviewlaunch&utm_content=newsletter-ai-code-review-beta-learnmore) โ€” Use Sentryโ€™s AI code review to spot errors, performance issues & test gaps in your pull requests. Sentry sponsor [npm-check-updates 19.0: Update `package.json` Dependencies to Latest Versions](https://github.com/raineorshine/npm-check-updates) โ€” That is, as opposed to the _specified_ versions. Has a `-i` interactive mode so you can look at upgrades and opt in to them one by one. The recent v18.2 release added a โ€˜cooldownโ€™ feature to help protect against supply chain attacks by requiring package versions be of a certain age first. Raine Revere ๐Ÿค– [GitHub Copilot CLI Now in Public Preview](https://github.blog/changelog/2025-09-25-github-copilot-cli-is-now-in-public-preview/) โ€” Not content to let Claude Code and OpenAI Codex dominate the CLI-based dev agent scene, GitHub has released a CLI-based version of Copilot, built using Node. GitHub [modern-tar: Zero-Dependency Streaming `tar` Parser and Writer](https://github.com/ayuhito/modern-tar) โ€” As in the classic [tar archive format.](https://en.wikipedia.org/wiki/Tar_%28computing%29) Ayuhito [ffetch: TypeScript-First `fetch` Wrapper with Extras](https://github.com/fetch-kit/ffetch) โ€” What extras? Think retries, circuit breaking, hooks, and monitoring of active requests. Gabor Koos - [pnpm 10.17](https://pnpm.io/blog/releases/10.17) โ€“ The new `minimumReleaseAgeExclude` now supports patterns to exclude groups of packages from minimum release age checks. - [TypeBox 1.0](https://github.com/sinclairzx81/typebox) โ€“ A runtime type system that creates in-memory JSON Schema objects that infer as TypeScript types. - ๐Ÿค– [OpenAI Node 5.23.1](https://github.com/openai/openai-node) โ€“ The official Node library for OpenAI's API now supports`gpt5-codex`. - [pretty-bytes 7.1](https://github.com/sindresorhus/pretty-bytes) โ€“ Convert a size in bytes into a human readable equivalent (e.g. 1337 becomes '1.34 kB'). - [Wasp 0.18](https://github.com/wasp-lang/wasp/releases/tag/v0.18.0) โ€“ [Wasp](https://wasp-lang.dev/) is a Rails-like framework using Node, React & Prisma. - [MongoDB Node.js Driver 6.20](https://github.com/mongodb/node-mongodb-native/releases/tag/v6.20.0) โ€“ The latest official MongoDB driver. - [pg-boss 11.0](https://github.com/timgit/pg-boss/releases/tag/11.0.0) โ€“ Postgres-based job queuing system for Node.js. - [Verdaccio 6.2](https://github.com/verdaccio/verdaccio) โ€“ Lightweight local private npm registry. ๐Ÿ“ฐ Classifieds ๐Ÿ•ณ๏ธ ๐ŸฅŠ At [Holepunch](https://holepunch.recruitee.com/o/senior-node-engineer?source=Node-Weekly) we maintain 2000+ OSS npm packages, make the JS runtime Bare to build the P2P Internet. Real tech, Real impact. [Join us!](https://holepunch.recruitee.com/o/senior-node-engineer?source=Node-Weekly) --- Go beyond caching. [Redis 8.2](https://redis.io/lp/get-started2/?utm_source=cooper-press&utm_medium=cpa&utm_campaign=2025-08-app_performance-node-weekly-2&utm_content=cloud_-_redis_cloud_users) handles 5x more data with 150 new commands and 8 new data structures vs 7.2. [Try Redis Pro.](https://redis.io/lp/get-started2/?utm_source=cooper-press&utm_medium=cpa&utm_campaign=2025-08-app_performance-node-weekly-2&utm_content=cloud_-_redis_cloud_users%20) ๐Ÿ“ข Elsewhere in the ecosystem A roundup of some other interesting stories in the broader landscape: - [The agenda of this week's TC39 meeting](https://github.com/tc39/agendas/blob/main/2025/09.md) where several proposals were advanced, including [Import Bytes](https://github.com/tc39/proposal-import-bytes), [Iterator Chunking](https://github.com/tc39/proposal-iterator-chunking/), and [`Array.prototype.pushAll`](https://danielrosenwasser.github.io/tc39-slides-2025-09-array-push-all/1). - [Bun v1.2.23 has been released](https://bun.com/blog/bun-v1.2.23) with a myriad of smaller features and Node.js compatibility improvements. The big release of Bun v1.3 is expected later this week, however. - [IINA](https://iina.io/) is a popular, open-source media player for macOS and it has just [added a JavaScript-based plugin system](https://iina.io/plugins/) to let users extend its functionality. - We recently mentioned [Andromeda](https://tryandromeda.dev/) as being the newest JavaScript runtime to appear, but [now there's Ion](https://github.com/alshdavid/ion), a runtime aimed at bringing a JavaScript engine into Rust programs. **Got a link for us?** Reply and tell us. We can't include everything but we'll look at anything you send. _Thanks!_ --- **Sponsorship:** Email `[kristina@cooperpress.com](mailto:kristina@cooperpress.com)` for details. --- Published by Cooper Press Ltd. Fairfield Enterprise Centre, Louth, LN11 0LS, United Kingdom [Cancel your subscription](https://nodeweekly.com/leave/*|UID|*) or [change your address](https://nodeweekly.com/edit_subscription/*|UID|*).