Security releases all round

August 12, 2021 By Mark Otto 0

📋 Node Weekly is taking a little summer vacation next week so we’ll be back for the next time on Thursday, August 26. See you then! 🙂
__
Peter Cooper, editor

V8 Release v9.3 — Recent V8 releases have been reasonably lean on new features, and so it goes with 9.3 which mostly gets faster compilation, Object.hasOwn (an alias for Object.prototype.hasOwnProperty.call), and the ability to attach error ‘causes’ to Error instances. It’s in beta until Chrome 93 (due in the coming weeks) and will appear in Node.js soon too.

Ingvar Stepanyan

Search Your Code. ALL of It, Everywhere — Sourcegraph is the one tool to find & fix things across all your code: any code host, any repo, any language. Easily construct complex queries to find & filter code in ways IDEs and code hosts can’t. Stay in flow & get your answers in milliseconds. Try it now.

Sourcegraph

QUICK BITS:

  • A developer claims npm has indefinitely suspended its process for adopting ‘abandoned’ packages because he accidentally ended up with a package that wasn’t actually abandoned..
  • Tim Perry thinks that the lowest severity fix in this week’s security releases (above) is more serious than it looks at first as it can allow TLS certificate verification to be (unintentionally) turned off in many HTTPS request scenarios.
  • It’s oriented around a commercial service, but it’s interesting to see the potential for distributing Node modules in a commercial way.

Deno 1.13 Released — Node’s cousin runtime has received a release with a ton of small enhancements, including its native HTTP server API going stable, language server improvements, more TLS customization options, and integrating V8 9.3.

The Deno Team

â–¶  Learning MongoDB by Building a Project — This was a livestream so is unedited and gently paced but it’s also thorough and honest as a nice look at how real developers approach building apps using Node, Next.js, and MongoDB’s hosted Atlas service.

Florin Pop and Jesse Hall

🛠 Code & Tools

Keyv: Simple Key-Value Storage with Multi-Backend Support — Need either a TTL-based cache or persistent key-value store for your Node app with total flexibility over the backend store? This supports MySQL, PostgreSQL, SQLite, Redis, Mongo, DynamoDB, Memcached, and, amazingly, more.

Microlink

Caterpillar 6.8: The ‘Ultimate’ Logging System — Log levels are implemented to RFC 3164 standards. Entries can be filtered and piped to various streams, including colorized output to the terminal, the browser console, and debug files. You can also write your own transforms. It supports Deno too.

Bevry

Senior Software Architect — As a Sr Software Architect you’ll be at the center of building the platform that enables us to redefine this industry.
Berkadia a Berkshire Hathaway and Jefferies Financial Group company

Find Tech Jobs with Hired — Create a profile on Hired to connect with hiring managers at growing startups and Fortune 500 companies. It’s free for job-seekers.
Hired