A Year of Improving Node.js Compatibility in Cloudflare Workers — “We’ve been busy,” says Cloudflare which recently announced it’s bringing Node.js HTTP server support to its Workers function platform. This post goes deep into the technicalities, covering what areas of the standard library is supported, how the file system works (Workers doesn’t have a typical file system), how input/output streams work, and more. And you can use all of this now.

James M Snell (Cloudflare)

Electron-Based Apps Causing System-Wide Lag on macOS 26 Tahoe? — There were a variety of reports and discussions on social media about system-wide sluggishness caused by changes in a private API in macOS that Electron uses. The good news? The recently released Electron 38.2, 37.6 and 36.9.2 fix the bug, if you maintain an Electron powered app you need to repackage.

Various Contributors

Go from Monolith to Monorepo — Join Mike North for this course on architecting maintainable, fast and light codebases. You'll learn how to refactor a codebase into a TypeScript monorepo using tools like Nx and Lerna — covering dependencies, formatting, linting, performance and more.

Frontend Masters sponsor

GitHub's Plan for a More Secure npm Supply Chain — In direct response to the recent npm ecosystem supply chain attacks of recent weeks, GitHub’s senior director of security research has outlined steps GitHub is taking, including blocking the upload of packages featuring the patterns of the recent malware, hardening package publication, and promoting the use of trusted publishing.

Xavier René-Corail (GitHub)

Mastering npx: A Cheatsheet for npm and Node Power Users — You’ve almost certainly used the npx command to easily run a command from an npm package (either local or remote) – it’s easy to use, but npx has a couple of other features and options to keep in mind.

Liran Tal

Skia Canvas 3.0: A Canvas Environment for Node — Based on Google’s Skia graphics engine and offers end results similar to Chrome’s own canvas. GPU accelerated and can render images, paths, fonts, shapes, etc. GitHub repo.

Christian Swinehart

Pompelmi: Scan File Uploads for Malware — Provides adapters for Express, Koa, and Next.js to perform fast file-upload malware scanning in Node, including digging into ZIP files and with optional integration with the YARA malware detection tool. GitHub repo.

Tommaso Bertocchi

Catch Bugs in PRs Before They Hit Production — Use Sentry’s AI code review to spot errors, performance issues & test gaps in your pull requests.

Sentry sponsor

npm-check-updates 19.0: Update package.json Dependencies to Latest Versions — That is, as opposed to the specified versions. Has a -i interactive mode so you can look at upgrades and opt in to them one by one. The recent v18.2 release added a ‘cooldown’ feature to help protect against supply chain attacks by requiring package versions be of a certain age first.

Raine Revere

🤖 GitHub Copilot CLI Now in Public Preview — Not content to let Claude Code and OpenAI Codex dominate the CLI-based dev agent scene, GitHub has released a CLI-based version of Copilot, built using Node.

GitHub

modern-tar: Zero-Dependency Streaming tar Parser and Writer — As in the classic tar archive format.

Ayuhito

ffetch: TypeScript-First fetch Wrapper with Extras — What extras? Think retries, circuit breaking, hooks, and monitoring of active requests.

Gabor Koos