Node.js 26.7.0 (Current) Released — Landing just two days after 26.6, coverage reports can now include files your tests didn't touch with --test-coverage-include-all, FFI and SQLite pick up crash fixes, and Perfetto tracing support lands, though you'll need a custom build to use it.

Antoine du Hamel

Join Sentry Live: How Etsy Stays Crash-Free — Sentry and Etsy break down how Etsy's engineering team preps for peak traffic, debugs in real time, and ties crashes to revenue impact. Real stories and practical takeaways for teams running services at scale.

Sentry sponsor

🚨 Shai-Hulud Strikes Again, Affecting keyv and 400+ Packages — A credential-stealing worm was rolled out as part of a false keyv 6.0 release this week, and quickly spread. A reminder to check out npm v12, pnpm, or vlt (below), all of which block install scripts by default, the mechanism this worm relied on.

Shavit Satou (JFrog)

vlt 1.0: An npm Alternative With CSS-Like Selectors — After two years, Darcy Clarke's drop-in npm alternative hits 1.0. A key draw is vlt query, which lets you use 60+ CSS-like selectors over your dependency graph (half of which are security related). vlt also offers hosted private package registries.

Darcy Clarke

anydoc: Convert 14 Document Formats into Markdown — A Rust-powered library (with Node.js and WASM bindings) that converts Word, PowerPoint, Excel, OpenDocument, RTF, EPUB, CSV, and PDF documents into Markdown. I tried it on a 1,600 page PDF and it took less than 2 seconds. There's also an in-browser demo to try it out. GitHub repo.

Firecrawl

You Added a Cache to Hide a Slow Query — TimescaleDB makes the query fast in Postgres, so you cache less and serve fresh data. Get $1000 credit to start.

Tiger Data (creators of TimescaleDB) sponsor

ioredis 6.0: Robust, Full-Featured Redis Client for Node — v6.0, the first major release in four years, adds RESP3 and support for new Redis 8.10 features.

The ioredis Team

MicroDiff 1.6: Fast Object and Array Comparison Library — Given two objects or arrays, it returns the differences (think diff but for JS objects). This week's release adds support for Temporal types.

Jacob Jackson

Devalue 5.9: Get the Job Done When JSON.stringify Can't — A library from the Svelte project that's like JSON.stringify but can tackle cyclical and repeated references, regexes, Map/Set, and custom types. Try it here.

Svelte