Web Design: New Node security releases, and npm 5.9

Thursday, March 29, 2018

New Node security releases, and npm 5.9

#231 — March 29, 2018

March 2018 Security Releases Now Available — 9.10.0 (Current), 8.11.0 (LTS), 6.14.0 (LTS) and 4.9.0 (Maintenance) are out with updated OpenSSL and security fixes for a DoS vulnerability and an HTTP parsing flaw. Note that this is now almost certainly the final 4.x release, too, so work on your upgrade plans now if you're still on it.

Node.js Foundation

Task Easy: A Simple Priority Queue for Promises — Ideal for running asynchronous tasks in a defined, synchronous order.

Canaan Seaton

Full-Stack Monitoring for Node Apps — Utilize distributed tracing and interactive flame graphs to track performance and optimize Node applications. Monitor and alert on infrastructure metrics, request traces, and logs in real-time. Try Datadog free.

Datadog sponsor

npm v5.9.0-next Released — The latest cutting edge version of npm is out with npm view now giving a neater, more human-friendly summary of a package by default (see below).

The npm Blog

The new 'npm view' output in npm 5.9

A Slack App Step-by-Step: A Real-Life Example — A thorough walkthrough of what building a Slack app with Node and Express.js entails.

Jacek Ławniczak

Node and JavaScript Meetups in North America — Want to hang out with other developers? Here's a neat collection of Node and JavaScript-oriented meetups in cities like Austin, Denver, Portland and Montréal.

Tierney Cyren

Announcing a Node.js 'Snap' for Linux Users — Snaps are containerized Linux packages and now Node and npm are easy to install (and switch) using them.

Rod Vagg

See What Devs are Saying About Net Neutrality, GDPR, and More...

DigitalOcean sponsor

Using async/await to Write Cleaner Route Handlers

Ruben Rutten

Jobs

Sr. Fullstack Engineer (Remote) — Sticker Mule is looking for passionate developers to join our remote team. Come help us become the Internet's best place to shop and work.

Sticker Mule

Node Expert? Sign Up for Vettery — Create your profile and we'll connect you with top companies looking for talented back-end developers.

Vettery

🔧 Code and Tools

Sympact: A Simple CPU and Memory Tracker for Node Apps — Profiles execution time, CPU usage, and memory usage, then returns an overall report.

Simone Primarosa

How-To: Low-Risk Continuous Delivery and Deployment 📦

ROLLBAR sponsor

better-xlsx: A Library for Working with Excel Spreadsheets — Open or create Excel XLSX files and work on sheets, rows, cells, etc.

D.Band

Host Validation: Express.js Middleware to Validate 'Host' and 'Referer' Headers — To protect against DNS rebinding attacks.

Brannon Dorsey