--- title: "Node 25.8 adds permission model audit mode" publication: "Node Weekly" issue: 614 published_at: "2026-03-05" canonical_url: "https://nodeweekly.com/issues/614" --- Plus a better Streams API for JavaScript, pure JS PDF typesetting, and will Node achieve calendar/version number harmony? #​614 — March 5, 2026 [Read on the Web](https://nodeweekly.com/issues/614) Together with [![Memetria\](https://res.cloudinary.com/cpress/image/upload/c_fill,g_auto,w_600,h_145/e_make_transparent/co_white,e_outline:7/vvpdctzacmq3xehpvwps.png)](https://dashboard.memetria.com/nodeweekly/) ![Node.js Weekly](https://res.cloudinary.com/cpress/image/upload/v1653576619/lgfqinzbdqttwmhvljxb.png) [![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60,q_auto/i2t89wjk2i4g46i1tkx6.jpg)](https://nodejs-org-git-fork-ulisesgascon-release-announcement-openjs.vercel.app/en/blog/announcements/evolving-the-nodejs-release-schedule) [Evolving the Node.js Release Schedule: A Work in Progress](https://nodejs-org-git-fork-ulisesgascon-release-announcement-openjs.vercel.app/en/blog/announcements/evolving-the-nodejs-release-schedule) — The Node.js team [has long been discussing](https://github.com/nodejs/Release/issues/1113) shifting Node to a new schedule of one major release per year (instead of two), removing the odd/even distinction, and making every release LTS (with a prior 11 months of alpha/current status). This is a preview post not intended for final publication till April, so things are subject to change ([backup version](https://gist.github.com/peterc/c67c356a802f37b0ea5528fcf8546cb7)). The Node.js Team 💡 A cute side effect of the change will be the latest LTS Node version will match the year. Node 28 will go LTS in 2028, and so on. [![\](https://res.cloudinary.com/cpress/image/upload/c_limit,w_480,h_480,q_auto/copm/02b2389d.png)](https://dashboard.memetria.com/nodeweekly/) [Memetria K/V: Efficient Redis & Valkey Hosting](https://dashboard.memetria.com/nodeweekly/) — Memetria K/V hosts Redis OSS and Valkey for Node.js apps, featuring large key tracking and detailed analytics. Memetria sponsor [Node.js 25.8.0 (Current) Released](https://nodejs.org/en/blog/release/v25.8.0) — A typical incremental maintenance release, with the interesting [addition of `--permission-audit`](https://github.com/nodejs/node/pull/61869) if you want to adopt [the permission model](https://nodejs.org/api/permissions.html), or are debugging failures with it. It enables the permission model in _warning-only_ mode, so it could be a good way to audit your app in advance of enabling the full feature. Richard Lau **IN BRIEF:** - The OpenJS Foundation has [launched a Node.js upgrade and modernization program](https://openjsf.org/blog/nodejs-lts-upgrade-program) aimed at helping _'enterprises move safely off legacy and end-of-life Node.js versions.'_ - 🌐 The popular [Inquirer.js](https://github.com/SBoudrias/Inquirer.js) family of CLI UI components has added [an i18n package](https://github.com/SBoudrias/Inquirer.js?tab=readme-ov-file#internationalization-i18n) for creating prompts in non-English languages. - The [Drizzle ORM](https://orm.drizzle.team/) team has [joined cloud database provider _PlanetScale_.](https://planetscale.com/blog/drizzle-joins-planetscale) [We Deserve a Better Streams API for JavaScript](https://blog.cloudflare.com/a-better-web-streams-api/) — _“I’m publishing this to start a conversation,”_ says James who shows off an alternative approach to streams working around the current standard’s _“fundamental usability and performance issues.”_ Following the success of this post, James has since [created a PR for Node.js](https://github.com/nodejs/node/pull/62066) to foster discussion and to demonstrate how his new approach can sit safely alongside the existing implementation. James M Snell [Upgrading OpenClaw on NVIDIA's Jetson Nano with Node 22](https://brtkwr.com/posts/2026-03-02-upgrading-openclaw-to-latest-node22-on-jetson-nano/) — Mostly interesting to see Node running on NVIDIA’s [tiny AI-focused computer.](https://developer.nvidia.com/embedded/jetson-nano) It took Node _27 hours_ to compile and required a patch to do so. Bharat Kunwar [Reliability Infrastructure Hits $5B Valuation](https://temporal.io/blog/temporal-raises-usd300m-series-d-at-a-usd5b-valuation?utm_source=newsletter&utm_medium=sponsorship&utm_campaign=newsletter-2026-03-05-node&utm_content=series-d-node) — Temporal’s Series D signals durable execution is becoming core to modern Node and backend systems. Temporal Technologies sponsor 📄 [Proxying Fetch Requests in Server-Side JavaScript](https://humanwhocodes.com/blog/2026/03/proxying-fetch-requests-server-side-javascript/) Nicholas C. Zakas ▶️ [Why I Chose Electron Over Native (And I’d Do It Again)](https://syntax.fm/show/983/why-i-chose-electron-over-native-and-i-d-do-it-again) Syntax Podcast 🛠 Code & Tools 📄 [VMPrint: Pure JS Typesetting Engine for Perfect PDF Output](https://github.com/cosmiciron/vmprint) — It’s common to defer to headless Chrome instances for print-to-PDF type work, but VMPrint _“guarantees identical layout given identical input, down to the sub-point position of every glyph.”_ [Here’s a sample PDF.](https://github.com/cosmiciron/vmprint/blob/main/documents/readme-assets/readme.pdf) I gave it a test for myself and it seemed to work pretty well. Cosmic Iron 💰 [Dinero.js 2.0: Create, Calculate, and Format Money Safely](https://www.dinerojs.com/) — An immutable library for expressing monetary values and performing calculations with them. [v2.0](https://github.com/dinerojs/dinero.js/releases/tag/v2.0.0) is a complete rewrite with a new, fully tree-shakeable functional architecture. Sarah Dayan [Bun v1.3.10 Released](https://bun.com/blog/bun-v1.3.10) — A hefty release. Bun’s REPL has been rewritten with many practical and cosmetic improvements, there's a `--compile --target=browser` option for building self-contained HTML files with all assets included, full support for TC39 [ES decorators](https://github.com/tc39/proposal-decorators), and more. Jarred Sumner [Unbarrelify: Barrel File Removal Tool for JavaScript](https://github.com/webpro-nl/unbarrelify/) — From the creators of [Knip](https://knip.dev/), a barrel file removal tool for JS/TS projects (ESM-only). WebPro - [Fastify 5.8](https://github.com/fastify/fastify/releases/tag/v5.8.0) – The fast, low-overhead web framework adds [handler-level timeouts](https://github.com/fastify/fastify/pull/6521) and [Pino](https://getpino.io/) v9/v10 compatibility. - 🤖 [GramIO 0.7](https://gramio.dev/) – Telegram Bot API framework. Now supporting the just-updated [Telegram Bot API 9.5](https://core.telegram.org/bots/api#march-1-2026). - 🎵 [mp3tag.js 3.16](https://mp3tag.js.org/) – Read, write, and remove ID3 metadata on MP3, MP4/M4A, AIFF, and AAC files. - [sax-js 1.5](https://github.com/isaacs/sax-js) – Isaac Z Schlueter's SAX-style XML and HTML parser. - [jose 6.2](https://github.com/panva/jose) – JSON Object Signing and Encryption library. - [NodeBB 4.9](https://github.com/NodeBB/NodeBB/releases/tag/v4.9.0) – Node.js based forum software. - [AVA 7.0](https://github.com/avajs/ava) – A popular Node.js test runner. 📰 Classifieds Next.js on Node.js? Here's How to Get Readable Stack Traces with[Sentry](https://blog.sentry.io/setting-up-next-js-source-maps-sentry/?utm_source=nodeweekly&utm_medium=paid-community&utm_campaign=nextjs-fy27q1-nextjs&utm_content=newsletter-classified-listing-blog-sourcemaps-learnmore). --- 📖 Master **Visual Studio Code**, and learn [over 150 essential tips in this screenshot-packed guide](https://lazarpress.gumroad.com/l/learnvscode) from Louis Lazaris. 📢 Elsewhere in the ecosystem [![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60,q_auto/snk0uemn0p9c50mlzi9d.jpg)](https://www.patreon.com/posts/seven-years-to-typescript-152144830) - Patreon has shared [the tale of its seven year migration from JavaScript to TypeScript.](https://www.patreon.com/posts/seven-years-to-typescript-152144830) There's a focus on tooling choices that might be useful if you're making a similar shift. - [npmx.dev](https://npmx.dev/) is a new, fast way to browse and search the official npm registry that's gone into _alpha_ this week with [a post running through all the details.](https://npmx.dev/blog/alpha-release) - [Packaging a Gleam App Into a Single Executable](https://www.dhzdhd.dev/blog/gleam-executable) shows how non-JavaScript languages can still benefit from the executable building capabilities of Deno, Bun, and Node. - Marianne Feng [hacked her old Kindle to display bus arrival times](https://www.mariannefeng.com/portfolio/kindle/) with Node playing a role. - 📉 [Uptime Kuma](https://github.com/louislam/uptime-kuma) is an impressive Node.js-powered self-hosted uptime monitoring tool we've begun using ourselves. It's easily deployed via Docker, if you prefer. **Got a link for us?** Reply and tell us. We can't include everything but we'll look at anything you send. _Thanks!_ --- **Sponsorship:** Email `[kristina@cooperpress.com](mailto:kristina@cooperpress.com)` for details. --- Published by Cooper Press Ltd. Fairfield Enterprise Centre, Louth, LN11 0LS, United Kingdom [Cancel your subscription](https://nodeweekly.com/leave/*|UID|*) or [change your address](https://nodeweekly.com/edit_subscription/*|UID|*).