Share

Over the past week, there’s been a flurry of activity in the project around some pretty heavy topics. Nevertheless, progress is being made and the majority of the work is pushing the envelope in terms of what the project has done in the past. Several new initiatives and efforts are all pulling out at once, with more and more people engaging across various areas of the project.

Here’s a recap of some of the highlights from the last week in Node.js:

What’s New in the Node.js Project

• Node.js core is discussing the possibility of adding WebSockets to Node.js, similarly to how N-API and HTTP/2 were added. This discussion has garnered quite a bit of (mostly positive) attention this week.
• The TSC is seems to be nearing consensus on moving forward with OpenSSL 1.1.0 for Node.js 10 as it goes into LTS. Previously, there had been some uncertainty from the OpenSSL team on whether or not OpenSSL 1.1.0 would be stable enough to be included in an LTS release, but that seems to be clearing up now.
• The Security WG has proposed that Node.js join the Internet Bug Bounty (IBB) Program, and this was raised in the TSC’s meeting last week. It seems there were no objections within the given window, indicating that the Security WG will be able to begin proceeding with joining the IBB.
• The Node.js User Feedback Initiative will be holding a public meeting with maintainers of a suite of JavaScript ecosystem tooling that relies on Node.js this coming friday. Quite a few maintainers have already expressed an interest, and more are joining in.
• The team maintaining nan released nan@2.10.0 on Friday

Awesome Articles and Resources

• Protecting Against HSTS Abuse by Brent Fulgham
• Infographic: npm badges by Bogdan Vasilescu
• TC39 developer engagement survey by TC-39
• Node.js Modules Team Meeting by the Modules Team
• Understanding Vulnerabilities in Node.js Applications with N|Solid by Tierney Cyren

One Last Thing…

Need to Node has been an awesome series to work on weekly so far, getting to take a weekly deep-dive into the community for cool new things.

If you’ve got anything you’d be interested in seeing or have any awesome articles, modules, or other resources in the Node.js community, feel free to reach out to us on Twitter at @NodeSource to share - our DMs are open if you don’t want to share publicly!