The Multi-Repository TypeScript Problem

Solving cross-repo type safety. - https://www.carrick.tools/blog/the-multi-repository-typescript-problem

#nodejs

Sidequest.js: A New Scalable Job Execution Option for Node

A modern, scalable background job processor for Node apps that includes a Web-based dashboard, the ability to support multiple backends out of the box, and TS-first ergonomics. - https://sidequestjs.com/posts/intro-to-sidequest/

#nodejs

Understanding Flame Graphs in Node.js  - https://nodesource.com/blog/understanding-flame-graphs-in-nodejs

#nodejs

How We Migrated Our Rush.js Monorepo to Node Type Stripping

Since v23.6 (and in LTS since v22.18.0), Node has supported running (most) TypeScript code by stripping the types out first. The Calm team was excited about the potential for improving productivity and DX, and set a migration in process. Here’s a look at the challenges encountered and what the end results were - https://blog.calm.com/engineering/how-we-migrated-our-rushjs-monorepo-to-node-type-stripping

#nodejs

Speeding Up the JavaScript Ecosystem: Semver

The latest in Marvin’s multi-year series of posts on optimizing heavily used parts of the JavaScript ecosystem: “During the installation process, package managers run a bunch of semver comparisons. The semver library used in npm, yarn and pnpm can be made around 33x faster.” - https://marvinh.dev/blog/speeding-up-javascript-ecosystem-part-12/

#nodejs

A Major Supply Chain Attack Hits the npm Ecosystem

In July, Socket warned us about a phishing campaign targeting npm package publishers. Sadly, a prolific package author (among others, like DuckDB, who explain how the attack worked on them) fell victim to the scam, resulting in some popular packages becoming compromised - https://socket.dev/blog/npm-author-qix-compromised-in-major-supply-chain-attack

#nodejs

Bringing Node HTTP Servers to Cloudflare Workers

A few weeks ago we linked to an item that noticed Cloudflare Workers' local dev tools had begun to support Express.js apps – now support has come to Workers proper, with support for node:http’s client and server APIs if you enable Node.js compatibility. - https://blog.cloudflare.com/bringing-node-js-http-servers-to-cloudflare-workers/

#nodejs

UDP in Node.js: A Technical Guide - https://nodevibe.substack.com/p/udp-in-nodejs-deep-technical-guide

#nodejs

pnpm 10.16 Adds Support for Delayed Dependency Updates

The alternative efficient npm package manager has added a way to specify a ‘minimum release age’ for package dependencies, so a setting of ‘1440’ (minutes) will mean only packages released more than one day ago will be installed. This can help avoid malicious versions of packages which are quickly withdrawn. - https://pnpm.io/blog/releases/10.16

#nodejs

Oh No, Not Again: A Meditation on npm Supply Chain Attacks

Noting that “npm has become the largest and easiest way to ship malware”, Tane points a finger at Microsoft, the custodians of the npm registry. - https://tane.dev/2025/09/oh-no-not-again...-a-meditation-on-npm-supply-chain-attacks/

#nodejs

How To Set-Up Express.js 5 for Production in 2025

A walkthrough of the basic dev process for the latest version of Express, complete with TypeScript, ESLint, Prettier, file structure, and logging. - https://www.reactsquad.io/blog/how-to-set-up-express-5-in-2025

#nodejs

Automating the Release Process for a Desktop App with GitHub Actions

Dolt Workbench is an SQL workbench packaged as an Electron app and distributed for several platforms. Eric explains how the Dolt team has automated the process and shares the code for their GitHub workflows. - https://www.dolthub.com/blog/2025-09-11-automating-desktop-release-process/

#nodejs

The State of QUIC Support in Node.js

A look at the many year story of bringing native QUIC support to Node and how Node 25 should get the first implementation in place. - https://nodevibe.substack.com/p/state-of-quic-in-nodejs

#nodejs