April 2021 Security Releases Coming Next Week — It’s time to get ready for more imminent security releases, this time to cover three ‘high’ severity issues in the 14.x, 12.x, and 10.x lines, and two high severity issues in 15.x. The releases are due on or shortly after next Tuesday and we’ll cover them in the next issue.
Daniel Bevenius
|
Middy 2.0: Node Middleware Engine for AWS Lambda — A popular way to simplify your code when building Node-powered serverless functions on AWS Lambda (think something like Express, but for this use case). The 2.0.0 release introduces some breaking changes (no more Node 10.x support), deprecates or refactors certain middleware, and adds new middleware for working with CloudWatch and S3 object responses.
Luciano Mammino
|
Node v12.22.0 (LTS) Released — A handful of backports and fixes to the older LTS release with ES modules now stable, the legacy HTTP parser is deprecated, and an update to node-api 8.
Richard Lau
|
How the Popular
Package Was Vunerable to Octal Input Data — An interesting look at how a package used by thousands of other projects was vulnerable to IP addresses notated in octal. This is the sort of edge case you want to be aware of when building similar IP validation systems.
Sick Codes
|
Managing Multiple Threads In Node — A look at how to potentially triple your Node app’s performance by managing multiple threads. There’s a video version of the post available too.
John Jardin
|
What’s New in Mongoose 5.12: Populate Transform — MongoDB and Mongoose user? This is for you. Mongoose has added a feature that lets you register a function that Mongoose will call on every populated document, giving more fine-grained control over what the results of
look like.
Valeri Karpov
|
Husky 6.0: Git Hooks Made Easier — v6.0 returns the project to a MIT license (it was briefly for sponsors only, to help fund the project). It now has no dependencies, is more lightweight, adheres more to the Git philosophy, and plays better with npm 7 and Yarn 2.
Typicode et al.
|
Prray: A ‘Promisified’ Array — A last minute submission from a reader (hi Ben!) that claims to be API compatible with the usual Array class but offers async versions of native methods like map and filter.
Ben Huang
|
|
0 Comments