Some Features Every JavaScript Developer Should Know in 2025

A quick list post breezing through a few more modern areas of JavaScript including iterator helpers, structuredClone(), and set operations. - https://waspdev.com/articles/2025-04-06/features-that-every-js-developer-must-know-in-2025

#nodejs

NPM Security Best Practices - https://cheatsheetseries.owasp.org/cheatsheets/NPM_Security_Cheat_Sheet.html

#nodejs

Debugging JavaScript Memory Leaks in Bun  - https://bun.sh/blog/debugging-memory-leaks

#nodejs

Optimizing Node Performance with V8 GC Optimization

Matteo recently ▶️ gave a talk at dotJS about Node’s memory usage and decided to write it up into a blog post too. Matteo notes that high memory usage doesn’t necessarily mean you have a memory leak, explains how V8’s garbage collector works, and how you can tune things specifically for your own use case. - https://blog.platformatic.dev/optimizing-nodejs-performance-v8-memory-management-and-gc-tuning

#nodejs

Microsoft Warns About Node.js' Role in Modern Malware

Microsoft’s security team is observing a sharp increase in the use of Node.js to deliver malware and other malicious payloads. This post digs into a couple of examples and what's going on behind the scenes. - https://www.microsoft.com/en-us/security/blog/2025/04/15/threat-actors-misuse-node-js-to-deliver-malware-and-other-malicious-payloads/

#nodejs

The Best Node.js Observability Tools in 2025

A comparison of seven approaches - https://nodesource.com/blog/nodejs-observability-tools-2025

#nodejs

The Node.js Test CI Security Incident Explained

The Node.js project recently experienced a critical security incident with its test CI infrastructure. Attackers exploited a flaw in the Jenkins pipeline and this post goes into detail about how it came about and was resolved. - https://nodejs.org/en/blog/vulnerability/march-2025-ci-incident

#nodejs

Giving V8 a Heads-Up: Faster Startup with Explicit Compile Hints

Not Node specific but a look at a V8 optimization that may become relevant in time. Explicit Compile Hints let you direct V8 to eagerly compile specific files as a way to speed up startup. It ships with Chrome 136. - https://v8.dev/blog/explicit-compile-hints

#nodejs

A Decade of Impact: How Our npm Packages Hit 1 Billion Downloads and Shaped JavaScript

A bold title for sure, but with a neat story behind it.  - https://forwardemail.net/en/blog/docs/how-npm-packages-billion-downloads-shaped-javascript-ecosystem

#nodejs

NestJS TypeORM and Multi-Tenancy

Not so different from any other ordinary type of project, multi-tenancy is a software architecture that has been in place for quite a while, and as with any other approach, there are pros and cons. In this article, I plan to walk you through a simple solution I implemented to tackle basic architecture inside the universe of the NestJS framework with TypeORM. - https://medium.com/nestjs-ninja/nestjs-typeorm-and-multi-tenancy-a7f6176e8319

#nodejs

Real-Time Data Processing with Node.js, TypeScript, and Apache Kafka

Imagine orchestrating a symphony where each instrument… - https://readmedium.com/real-time-data-processing-with-node-js-typescript-and-apache-kafka-24a53f887326

#nodejs

Koa 3.0: The Expressive HTTP Middleware Framework

Koa first appeared over a decade ago as a ‘next-generation’ Web framework that shared some of the lineage (and team) of Express.js, but leaning on more modern JavaScript features and ideas of the time. While Express has been making a comeback recently, Koa has progressed too and offers a compelling alternative. - https://koajs.com/

#nodejs

The Node.js Test CI Security Incident Explained

The Node.js project recently experienced a critical security incident with its test CI infrastructure. Attackers exploited a flaw in the Jenkins pipeline and this post goes into detail about how it came about and was resolved. - https://nodejs.org/en/blog/vulnerability/march-2025-ci-incident

#nodejs

Retrieval-Augmented Generation (RAG) with Llama Stack and Node

Meta’s Llama Stack is a unified set of APIs for working with numerous parts of the modern LLM-powered stack, including RAG, as demonstrated here. - https://developers.redhat.com/articles/2025/04/30/retrieval-augmented-generation-llama-stack-and-nodejs

#nodejs

npm Targeted by Malware Campaign Mimicking Familiar Library Names - https://socket.dev/blog/npm-targeted-by-malware-campaign-mimicking-familiar-library-names

#nodejs

Node.js Streams with TypeScript - https://www.sitepoint.com/node-js-streams-with-typescript/

#nodejs

Why We Created Another Kafka Client for Node.js

Apache Kafka is a popular distributed event streaming platform but the existing client libraries have various flaws, leading Platformatic to release a new one built around modern Node best practices. - https://blog.platformatic.dev/why-we-created-another-kafka-client-for-nodejs

#nodejs

Best Practices for Creating a Modern npm Package

A step-by-step “as of 2025” walkthrough of creating your own npm package using current best practices. We’ve linked to this before but it’s just been updated. - https://snyk.io/blog/best-practices-create-modern-npm-package/

#nodejs

Working with File System Paths and File URLs in Node - https://exploringjs.com/nodejs-shell-scripting/ch_nodejs-path.html

#nodejs

Node.js TSC Declines to Endorse Feature Bounty Program

There was recently a debate around whether the Node.js project should establish a formal feature bounty program to enable end users to offer monetary rewards for specific features. This post summarizes why the official response is no, for now. - https://socket.dev/blog/node-js-tsc-declines-to-endorse-feature-bounty-program

#nodejs