--- title: "Petition calls for ban on AI-generated code in Node.js core" publication: "Node Weekly" issue: 616 published_at: "2026-03-19" canonical_url: "https://nodeweekly.com/issues/616" --- Plus a virtual file system for Node, TC39 updates, the pros and cons of worker threads, and running Node apps in a WASM sandbox. #​616 β€” March 19, 2026 [Read on the Web](https://nodeweekly.com/issues/616) Together with [![Frontend Masters logo\](https://res.cloudinary.com/cpress/image/upload/c_fill,g_auto,w_300,h_70/e_make_transparent/co_white,e_outline:5/nk0tfdvalivacz8rw7rt.png)](https://frontendmasters.com/courses/ai-agents-v2/?utm_source=email&utm_medium=nodeweekly&utm_content=aiagentsv2) ![Node.js Weekly](https://res.cloudinary.com/cpress/image/upload/v1653576619/lgfqinzbdqttwmhvljxb.png) [![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60,q_auto/vleephvykt5ci7kalfvc.jpg)](https://github.com/indutny/no-slop-in-nodejs-core) πŸ€– [No AI Code in Node.js Core? A Petition to the Node.js TSC](https://github.com/indutny/no-slop-in-nodejs-core) β€” A long-running [discussion about the use of AI-assisted development](https://github.com/openjs-foundation/cross-project-council/issues/1509) in OpenJS Foundation projects (Node is one), coupled with a new 19K LOC PR _(more on that later)_, has inspired a long-standing Node contributor to start a petition to restrict code created by AI systems from going into Node’s core. Fedor Indutny et al. πŸ—£οΈ There were [many comments on Reddit's `/r/node`](https://www.reddit.com/r/node/comments/1rx8jsq/a_petition_to_disallow_acceptance_of_llm_assisted/) about this topic. The consensus was largely in _support_ of AI, but against huge 10,000+ line PRs generally. [![\](https://res.cloudinary.com/cpress/image/upload/c_limit,w_480,h_480,q_auto/copm/68db6eea.jpg)](https://frontendmasters.com/courses/ai-agents-v2/?utm_source=email&utm_medium=nodeweekly&utm_content=aiagentsv2) [Build AI Agents from Scratch in Node.js](https://frontendmasters.com/courses/ai-agents-v2/?utm_source=email&utm_medium=nodeweekly&utm_content=aiagentsv2) β€” Tool calling, agent loops, evals, web search, and human approval flows -- taught by Scott Moss (Senior Dev at Netflix). Rated 4.86/5 by 90 developers. Frontend Masters sponsor [Why Node.js Needs a Virtual File System](https://blog.platformatic.dev/why-nodejs-needs-a-virtual-file-system) β€” The idea is simple: hook into `node:fs` and the module resolver so you can `import` modules that exist only in memory for things like sandboxing, single executable apps, and test isolation. Matteo Collina has built a `node:vfs` module for Node core _and_ released [a userland package](https://github.com/platformatic/vfs) that works today ([with some compromises](https://blog.platformatic.dev/why-nodejs-needs-a-virtual-file-system#why-vfs-needs-to-live-in-core-nodejs)). Matteo Collina (Platformatic) 😬 [The PR for `node:vfs`](https://github.com/nodejs/node/pull/61478) was one of the inspirations for the AI petition _(above)_. **IN BRIEF:** - ⚠️ All maintained Node.js versions (25.x, 24.x, 22.x and 20.x) [will get security releases next week](https://nodejs.org/en/blog/vulnerability/march-2026-security-releases) (on or after March 24) to address nine vulnerabilities. - At last week's TC39 meeting, [several language proposals were advanced](https://socket.dev/blog/tc39-advances-temporal-to-stage-4) including [Temporal](https://bloomberg.github.io/js-blog/post/temporal/), [Import Text](https://github.com/tc39/proposal-import-text), [Error Stack Accessor](https://github.com/tc39/proposal-error-stack-accessor), and [Iterator Includes](https://github.com/tc39/proposal-iterator-includes). - [A Node.js PR proposes opt-in support for TLS certificate compression](https://github.com/nodejs/node/pull/62217), which could shrink handshake sizes and reduce fingerprintability. - [Bun v1.3.11](https://bun.sh/blog/bun-v1.3.11) has been released with `Bun.cron` for OS-level cron jobs and expression parsing, ANSI and grapheme-aware string slicing, and yet more [Node.js compatibility improvements.](https://bun.sh/blog/bun-v1.3.11#node-js-compatibility-improvements) [Node Worker Threads are Problematic, But Work Great for Us](https://www.inngest.com/blog/node-worker-threads) β€” A practical case study of solving event loop starvation in a WebSocket-based SDK by moving connection internals into a worker thread, while recognizing the constraints of `worker_threads` compared to threading approaches in other languages. Aaron Harper (Inngest) [Clerk Core 3: Keyless Mode, Satellite Fixes, Upgrade CLI](https://go.clerk.com/8erFQa8) β€” Keyless mode for TanStack Start, Astro, and React Router. Satellite domains skip redirects for anonymous visitors. Clerk sponsor πŸ“„ [Rewriting a 12-Year-Old JavaScript Library in TypeScript](https://ifandelse.com/blog/rewriting-a-12-year-old-javascript-library-in-typescript/) – Specifically, the [Machina](https://machina-js.org/) finite state machine library. Jim Cowart πŸ“„ [Monitoring Your Node.js App's Health on Fly.io](https://blog.appsignal.com/2026/03/12/monitoring-your-node.js-app-health-on-fly-io.html) Tarun Singh (AppSignal) πŸ›  Code & Tools [![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60,q_auto/tx9gxccojk8jj8fltnzm.jpg)](https://wasmer.io/posts/edgejs-safe-nodejs-using-wasm-sandbox) [Edge.js: Running Node Apps Inside a WebAssembly Sandbox](https://wasmer.io/posts/edgejs-safe-nodejs-using-wasm-sandbox) β€” A new runtime (in alpha, for now) that maintains full Node.js compatibility while isolating unsafe execution via WebAssembly. Existing apps and native modules run unmodified with system calls sandboxed through WASIX. There’s [more info on Edge.js's homepage.](https://edgejs.org/) Syrus Akbary (Wasmer) - [jsdom 29.0.0](https://github.com/jsdom/jsdom) – Pure JS implementation of WHATWG DOM and HTML Standards for use with Node for testing, scraping, and similar use cases. - [node-rate-limiter-flexible 10.0](https://github.com/animir/node-rate-limiter-flexible/releases/tag/v10.0.0) – Atomic and non-atomic counters for limiting access to resources. - [better-sqlite3 12.8](https://github.com/WiseLibs/better-sqlite3/releases/tag/v12.8.0) – The popular SQLite library updates to [SQLite 3.51.3](https://sqlite.org/releaselog/3_51_3.html) and now requires Node 20+. - [`pnpm/action-setup` 5.0](https://github.com/pnpm/action-setup) – GitHub Action to install and configure [pnpm](https://pnpm.io/). Now uses Node.js v24. - πŸ€– [OpenAI v6.32.0](https://github.com/openai/openai-node) – OpenAI's REST API client. Now with [GPT 5.4 mini and nano](https://openai.com/index/introducing-gpt-5-4-mini-and-nano/)support. - [Node File Trace 1.4](https://github.com/vercel/nft) – A tool that determines exactly which files are necessary for an app to run. - [XO 2.0](https://github.com/xojs/xo) – Opinionated, configurable ESLint 10 wrapper with _'lots of goodies'._ - [node-oom-heapdump 3.8](https://github.com/blueconic/node-oom-heapdump) – Create a V8 heap snapshot right before OOM. - [node-osc 11.3](https://github.com/MylesBorins/node-osc) – No-frills [Open Sound Control](http://opensoundcontrol.org/) client and server. - [Hookable 6.1](https://github.com/unjs/hookable) – Awaitable hooks system. πŸ“’ Elsewhere in the ecosystem - [Next.js 16.2 has been released.](https://nextjs.org/blog/next-16-2) The popular React framework gets much faster `next dev` startup times, faster rendering, significant [Turbopack-related](https://nextjs.org/blog/next-16-2-turbopack) improvements, and [some goodies for AI-assisted development.](https://nextjs.org/blog/next-16-2-ai) - Should `BigInt.PI === 3`? Enjoy _qntm_'s tongue-in-cheek [proposal to add mathematical constants to `BigInt`.](https://github.com/qntm/proposal-bigint-constants) - πŸ€– [Addy Osmani introduces us to _comprehension debt_](https://addyosmani.com/blog/comprehension-debt/). In a world of agent-produced code, the question is now not _β€œhow do we generate more code?”_ but _β€œhow do we actually understand more of what we’re shipping?”_ - One from the Postgres world: [how a single query blew up and consumed 2 terabytes of memory](https://mydbanotebook.org/posts/work_mem-its-a-trap/) before being taken down by Linux's OOM killer. - ο£Ώ [Awesome Mac](https://github.com/jaywcjlove/awesome-mac) is a fantastic, well-updated curated directory of macOS software, with a large [developer tools section.](https://github.com/jaywcjlove/awesome-mac?tab=readme-ov-file#developer-tools) - And much, much more (including Vite 8!) in [this week's issue of _JavaScript Weekly._](https://javascriptweekly.com/issues/777) **Got a link for us?** Reply and tell us. We can't include everything but we'll look at anything you send. _Thanks!_ --- **Sponsorship:** Email `[kristina@cooperpress.com](mailto:kristina@cooperpress.com)` for details. --- Published by Cooper Press Ltd. Fairfield Enterprise Centre, Louth, LN11 0LS, United Kingdom [Cancel your subscription](https://nodeweekly.com/leave/*|UID|*) or [change your address](https://nodeweekly.com/edit_subscription/*|UID|*).