--- title: "The life of a ~200ms HTTP request to a Node app" publication: "Node Weekly" issue: 633 published_at: "2026-07-16" canonical_url: "https://nodeweekly.com/issues/633" --- Plus actions/setup-node@v7, a great PDF parser, and a deep dive into Proxy and Reflect. #​633 — July 16, 2026 [Read on the Web](https://nodeweekly.com/issues/633) Together with [![Master.dev\](https://res.cloudinary.com/cpress/image/upload/c_fill,g_auto,w_1280,h_245/co_white,e_outline:17/cgiteem1q7kgf8yoheqo.png)](https://master.dev/courses/agent-harness/?utm_source=email&utm_medium=newsletter&utm_campaign=cooperharness) ![Node.js Weekly](https://res.cloudinary.com/cpress/image/upload/v1653576619/lgfqinzbdqttwmhvljxb.png) [![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60,q_auto/dilnllzd34vzt8qhuhgu.jpg)](https://200ms.thenodebook.com/#act-0-prologue) [Follow a Single HTTP Request Through Its ~200ms Life](https://200ms.thenodebook.com/#act-0-prologue) — From the creator of [NodeBook](https://www.thenodebook.com/node-arch/what-is-nodejs), a thorough guide to Node's internals, comes a scroll-driven visualization following _every step_ a single HTTP POST request takes from the user's click to Node's event loop and on to a database behind it. Ishtmeet Singh [![\](https://res.cloudinary.com/cpress/image/upload/c_limit,w_480,h_480,q_auto/copm/d17bc7e7.png)](https://master.dev/courses/agent-harness/?utm_source=email&utm_medium=newsletter&utm_campaign=cooperharness) [The Best Harness Wins, Not the Best Model. Learn Harness Engineering](https://master.dev/courses/agent-harness/?utm_source=email&utm_medium=newsletter&utm_campaign=cooperharness) — Scott Moss (Netflix) teaches you to wrap an LLM in a production-grade harness. Learn durable execution, sandboxing, memory, and multi-agent orchestration. Master.dev sponsor [Fetch Needs Error Codes](https://www.jasnell.me/posts/fetch-needs-error-codes) — `e.cause.code` lets you find out why a `fetch()` failed in Node, but the spec says failures are just bare `TypeError`s, so HTTP/2/3 typed signals like _"safe to retry this POST"_ go missing. James, who created Node's error code convention, is pushing a TC39 proposal to standardize a fix. James M Snell **IN BRIEF:** - [Ant](https://antjs.org/) is a new entry to the growing field of JavaScript runtimes. This time, it's an independent engine written in C packed into a 9MB binary that boasts very low cold start times and can run Hono apps. - If you're considering using Go at all, [this 'from Express to Fiber' guide](https://docs.gofiber.io/blog/express-to-fiber-guide/) with examples in both JavaScript and Go (on the Express-inspired [Fiber](https://github.com/gofiber/fiber) framework) could be helpful. - 🇮🇹 [NodeConf EU 2026](https://nodeconf.eu/) takes place this September 29-30 in Italy. [Tickets](https://ti.to/apropos/nodeconf-eu-2026) are still available. - [Vercel is deprecating Node 20](https://vercel.com/changelog/node-js-20-is-being-deprecated) for _Builds_ and _Functions_ on October 1, 2026. [`Proxy` and `Reflect`: Redefining How Objects Fundamentally Work](https://piccalil.li/blog/proxy-and-reflect/) — A deep dive into intercepting the internal operations of JavaScript objects, covering why `Reflect` exists at all, and ending with a small reactive state system. Mat Marquis [Telegram Serverless: Run Telegram Bots on Telegram's Servers](https://core.telegram.org/bots/serverless) — Creating a bot for Telegram is easy (it has [a _great_ API](https://core.telegram.org/bots/api)) with libraries like [node-telegram-bot-api](https://github.com/yagop/node-telegram-bot-api), but it's starting to support running them on its _own_ servers. Telegram 💡 The serverless program is in beta, so not all users will have access to it yet. 📄 [A Gentle Introduction to Git Worktrees](https://humanwhocodes.com/blog/2026/07/introduction-git-worktrees/) – For when you need to check out multiple branches into separate directories simultaneously. Nicholas C. Zakas 📄 [Playwright on GitHub Actions: A Setup That Actually Runs Fast](https://endform.dev/blog/playwright-github-actions) – How to cut Playwright CI time by caching browser binaries, lifting the scaffold's one-worker cap, and more. Jakob Norlin 📄 [6 Security Settings Every GitHub Maintainer Should Enable This Week](https://github.blog/security/6-security-settings-every-github-maintainer-should-enable-this-week/) Joseph Katsioloudes (GitHub) 🛠 Code & Tools [![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60,q_auto/p3ow0hsqzactzle7wsgv.jpg)](https://github.com/run-llama/liteparse#liteparse) [LiteParse 2: Fast, Light PDF Document Parsing](https://github.com/run-llama/liteparse#liteparse) — A PDF parser built in Rust with bindings for Node (plus WASM, Rust, and Python) — it worked great in my testing. It includes OCR, handles layouts/is spatially aware, and is fast (a complex 140-page PDF took ~10 seconds). [Here's how to get started from Node](https://github.com/run-llama/liteparse/blob/main/packages/node/README.md). LlamaIndex [One Postgres for Your API and Your Analytics](https://www.tigerdata.com/go/trial?utm_source=content-syndication&utm_medium=referral&utm_campaign=node-weekly-newsletter) — TimescaleDB extends Postgres so your app and analytics run in one database at scale. [Get $1000 credit to start](https://www.tigerdata.com/go/trial?utm_source=content-syndication&utm_medium=referral&utm_campaign=node-weekly-newsletter). Tiger Data (creators of TimescaleDB) sponsor [`actions/setup-node@v7`: Install Node in GitHub Actions](https://github.com/actions/setup-node/releases/tag/v7.0.0) — The popular way to set up an Actions workflow with a version of Node brings changes supporting GitHub's cache-poisoning defenses, inspired by recent exploits. There are also [new docs](https://github.com/actions/setup-node/blob/main/docs/advanced-usage.md#publishing-to-npm-with-trusted-publisher-oidc) on publishing to npm with Trusted Publisher (OIDC). GitHub 🎬 [Mediabunny: A Full Media Toolkit for JavaScript](https://mediabunny.dev/) — It's been a year since we mentioned this library for reading/writing/converting media formats (MP4, MP3, [and more](https://mediabunny.dev/guide/supported-formats-and-codecs)). Since then, it's added Apple ProRes, HLS read/write, and [a new `server` package](https://github.com/Vanilagy/mediabunny/releases/tag/v1.45.0) that makes it all even easier to use from Node. Vanilagy [Tinbase: A Supabase-Compatible Backend in a Single Binary](https://www.tinbase.dev/) — Provides a local Supabase-like dev experience using a JS backend built atop [PGlite](https://pglite.dev/) and [pg-mem](https://github.com/oguimbal/pg-mem). A sort of mini, local-only Postgres wrapped in the same APIs as Supabase, so `supabase-js` works unchanged. Sanket Sahu [`@neon/sdk`: Neon's New TypeScript Client Library](https://neon.com/blog/neon-sdk) — For users of the [Neon](https://neon.com/) Postgres platform to manage projects, branches, and databases from code. Andre Landgraf (Neon) - [Nano ID 6.0](https://github.com/ai/nanoid) – Generate tiny URL-friendly unique string identifiers. Now 4x faster and drops Node 18/20 support. - [c8 12.0](https://github.com/bcoe/c8) – Istanbul-compatible coverage reports using Node's built-in V8 data. Node's test runner also has its own [experimental code coverage reporting](https://nodejs.org/api/test.html#collecting-code-coverage). - [np 12.0](https://github.com/sindresorhus/np) – Sindre Sorhus's "better `npm publish`" adds support for npm 12 and staged publishing. - [HyperExpress 7.0](https://github.com/kartikk221/hyper-express) – A high performance Node server powered by uWebSockets.js. - [Helmet 8.3](https://github.com/helmetjs/helmet) – HTTP security header hardening for Express apps. - [node-auth0 6.0](https://github.com/auth0/node-auth0/releases/tag/v6.0.0) – One for [Auth0](https://auth0.com/) users. - [ESLint 10.7](https://eslint.org/blog/2026/07/eslint-v10.7.0-released/) 📢 Elsewhere in the ecosystem - TypeScript-using AWS SDK for JavaScript v3 users need to be aware of [changes to the library's support for TypeScript versions](https://aws.amazon.com/blogs/developer/updating-typescript-version-support-in-aws-sdk-for-javascript-v3/). - GitHub's [Dependabot is now giving packages a three-day default cooldown](https://github.blog/changelog/2026-07-14-dependabot-version-updates-introduce-default-package-cooldown/) before opening version update PRs, though security fixes are exempt. - TC39's 115th meeting takes place next week. [Here's the agenda](https://github.com/tc39/agendas/blob/main/2026/07.md), including [Await Dictionary](https://github.com/tc39/proposal-await-dictionary) aiming for Stage 3, plus [Decimal](https://github.com/tc39/proposal-decimal/), Import Defer, and [Map.take](https://github.com/dcrousso/proposal-Map-take). - 📁 [Cloudflare has launched 'Drop'](https://www.cloudflare.com/drop/), a way to quickly get a site live by dropping a folder or ZIP onto a page, similar to [Netlify's service of the same name](https://app.netlify.com/drop). - [plx](https://github.com/commandprompt/plx) is a transpiler for Postgres stored functions that converts JavaScript, PHP, Python, Ruby, and even COBOL, to Postgres's own PL/pgSQL language. **Got a link for us?** Reply and tell us. We can't include everything but we'll look at anything you send. _Thanks!_ --- **Sponsorship:** Email `[kristina@cooperpress.com](mailto:kristina@cooperpress.com)` for details. --- Published by Cooper Press Ltd. Fairfield Enterprise Centre, Louth, LN11 0LS, United Kingdom [Cancel your subscription](https://nodeweekly.com/leave/*|UID|*) or [change your address](https://nodeweekly.com/edit_subscription/*|UID|*).