Node Weekly
Plus people discuss NestJS, we learn some of the V8 GC's history, and some nifty DX improvements in VS Code. |

#​601 — November 18, 2025

Read on the Web

Together with  Memetria
Node.js Weekly

Node.js v25.2.1 (Current) Released (and 25.2.0 with Type Stripping Marked 'Stable') — v25.2.0 was released hours after we hit send last week (often the way!) and marked type stripping as stable, meaning all major server-side runtimes now support TypeScript officially (at least in type-stripping form). v25.2.1, on the other hand, reverts a spec-compliance issue where localStorage access can throw an exception (which will be pushed back to v26).

Antoine du Hamel

Real-Time Redis Visibility for Node Apps — Memetria K/V turns Redis metrics into insight. Track memory growth, large keys, and latency in real time — all from a dashboard designed for Node.js developers running Redis OSS or Valkey at scale.

Memetria sponsor

Comparing Electron vs. Tauri for Building and Distributing a Desktop App — A team working on an open-source desktop app built using JavaScript and Electron took a look into the Rust-based Tauri instead, with mixed, but mostly positive, results (while still being able to write their app mostly in JavaScript).

Eric Richardson

IN BRIEF:

V8's Garbage Collector Developments in Recent Years — Andy, who’s worked on both V8 and JavaScriptCore in the past, reviews the major developments in the V8 engine’s garbage collector over the past couple of years. Very technical, but a valuable slice of history.

Andy Wingo

Automated NPM Secret Rotation in GitHub Actions — If you’ve built a system to automatically publish to npm, you may have had to change things due to this month’s npm security changes. Here’s a way to keep things ticking if you’re not ready to switch to trusted publishing.

Michael Heap

📄 How to 'Officially' Deprecate Methods with Node.js Utilities – Did you know Node has a deprecate method? Stefan Judis

📄 Tinyglobby: A Success Story in Modernization and Performance Madeline Gurriarán

📄 The IndonesianFoods TEA Theft: Analyzing an NPM Spam Campaign Staicu and Raj (Endor Labs)

📄 Several Tips for Secure Coding in JavaScript Tanya Janca

🛠 Code & Tools

Inquirer.js 13.0: A Collection of Common Interactive CLI Controls — Want to ask your users questions? Select from predefined options? Enter a password? Check boxes? Inquirer is a good way to do that. v13 is a ‘modernization’ of the codebase which is now ESM only (no CommonJS) and removes a variety of deprecations. Yoctocolors also gets dropped for Node’s own styleText.

Simon Boudrias

Build a JSON-to-PDF Workflow for Your App — Learn how to generate PDFs programmatically — ideal for quotes, receipts, or contracts. No setup headaches.

Foxit Software sponsor

Globby 16.0: User-Friendly Glob Matching — Give it an array of globs and it returns an array of matching paths. It supports negations (including negation-only patterns in v16) and can also respect .gitignore files (and, new in v16, .gitignore files in parent directories too).

Sindre Sorhus

node-libcurl 5.0: libcurl Bindings for Node — libcurl is a very powerful and established way to fetch data from URLs across numerous protocols (HTTP, IMAP, SCP, SFTP, LDAP etc.) v5.0 upgrades to libcurl 8.17.0 and pre-built binaries now have HTTP/3 support enabled across all platforms.

Jonathan Cardoso Machado

📊 Ackee 3.5: A Self-Hosted, Node-Based Web Analytics System — Last week we mentioned Umami but Ackee is another long standing option powered by Node for self-hosted Web analytics. GitHub repo.

Tobias Reich

Marked.js 17.0: A Fast Markdown Parser and Compiler — A low level Markdown compiler built for speed and available as a client-side library, server-side library, and even a CLI.

Christopher Jeffrey

  • pnpm 10.22 – Fast, space efficient package manager. Adds a trustPolicyExclude option to specify packages that should be installed in spite of any other trust policy requirements.

  • MikroORM 6.6 – TypeScript ORM for Node.js based on Data Mapper, Unit of Work and Identity Map patterns. Now offering more control over filters on relations, as well as private property accessors.

  • 🤖 OpenAI Node 6.9 – The official Node library for OpenAI's adds support for the newly released GPT-5.1.

  • ESLint v10.0.0 Alpha 0 – Get an early look at the breaking changes in the next major release.

  • LogTape 1.2 – Simple logging library for all major JS runtimes. Changelog.

  • pg-boss 12.2 – Postgres-based job queuing system for Node.js.

  • Mercurius 16.6 – Implement GraphQL servers on top of Fastify.

  • FoalTS 5.1 – Full-featured Node.js app framework.

📰 Classifieds

✍️ Add e-signatures to your Node.js app in minutes with the BoldSign Node.js SDK—powered by our e-signature API. Get your free API key today.


The Road to Next is a course by Robin Wieruch for learning full-stack web development with Next.js 15 and React 19. The perfect match for JavaScript developers ready to go beyond the frontend.

📢  Elsewhere in the ecosystem

A roundup of some other interesting stories in the broader landscape:

Issue 600 #601 Issue 602