Using Rust to build Node modules

Introducing Even More Security Enhancements to npm — GitHub continues to up npm’s security game with enhancements that affect most of us in some way or another. There’s a streamlined login and publishing experience with the npm CLI, you can connect your GitHub and Twitter accounts to your npm one, and there’s a new npm command (npm audit signatures) to verify the integrity of packages in npm (all of which have been re-signed).

Myles Borins and Monish Mohan (GitHub)

Build a Fullstack App from Scratch — Join Scott Moss for this detailed video course on building a fully featured app using a modern stack (React, Next.js, TypeScript, Postgres). You’ll cover UI, data modeling, authentication, state management, deployment, testing, and more.

Frontend Masters

Creating ESM-Based Shell Scripts for Unix and Windows — This is not as easy as you’d hope! But luckily Dr. Axel has figured out most of the intricacies of creating modern shell scripts with Node and packed it all into this factually dense post.

Dr. Axel Rauschmayer

Using Rust for Writing Node Modules — Soon it’s going to be difficult to find anywhere that the Rust language isn’t! This post boils down creating a Rust-powered extension to the absolute essentials as a springboard to further experiments. NAPI-RS is another option this space if you want to write as little boilerplate as possible.

TechFund

Deeper Testing of Bun’s Performance and Compatibility Against Node — Last week we linked to David’s initial Node vs Bun comparison but had to quickly retract it as there was a rather big flaw in the testing. Happily, David is back with “some more carefully constructed performance tests” that digs deeper and shows that while Bun’s Node.js compatibility still isn’t really there, it’s early days and there’s a lot of promise. “Bottom line is that Bun will succeed if the Node.js community pitches in.”

David Herron

Node v18.7.0 (Current) Released — A minor release. npm and Undici get version bumps. http now sends a dropRequest event when requests are dropped due to hitting server.maxRequestsPerSocket. util.parseArgs continues to get some enhancements. It’s all quite bitesize stuff, but progress nonetheless.

Danielle Adams (Node.js)