Web Design: A checklist of Node.js security best practices

Thursday, August 2, 2018

A checklist of Node.js security best practices

#249 — August 2, 2018

Node.js is the ecosystem of choice for the majority of serverless development, and so it seems barely a week can go by without us including a serverless-related link in Node Weekly. If serverless development interests you, check out our serverless newsletter – there's a lot going on in the space for Node developers :-)
— Peter Cooper, editor

Clinic Bubbleprof: A New Way To Visualise Node Code — From the creators of Node Clinic comes a new, open source visualization tool for profiling your Node code.

nearForm

A Checklist of 23 Node.js Security Best Practices — A curated list of 23 high-level Node security best practices with code examples and quotes from the top ranked blogs.

Yoni Goldberg, Kyle Martin and Bruno Scheufler

Save Weeks Per Year Fixing Unseen Bugs in Your Node App with Sentry — Relying on users to report errors? Use Sentry to cut time to resolution from 5 hours to 5 minutes. Eliminate noise and route alerts to the right person or team based on the commit. Sentry is open source and loved by 500K developers. Sign up for free.

Sentry sponsor

Fusion.js: A Plugin-based Universal Web Framework from Uber — Uber builds and maintains hundreds of Web apps, both internal and public, and Fusion.js is their answer to the challenges this presents. It comes with hot module reloading, data-aware server-side rendering, and bundle splitting out of the box.

Leo Horie

Node v10.8.0 (Current) Released — Lots of minor fixes as usual, with the only noteworthy update being npm upgrading to v6.2.

Node.js Foundation

Node Passes 1 Billion Downloads — 1,166,466,998 as of this Monday, in fact - made up of both direct downloads and Docker image downloads.

Tierney Cyren on Twitter

💻 Jobs

Node.js Developer at X-Team (Remote) — We help our developers keep learning and growing every day. Unleash your potential. Work from anywhere. Join X-Team.

x-team

Join Our Career Marketplace & Get Matched With a Job You Love — Through Hired, software engineers have transparency into salary offers, competing opportunities and job details.

Hired

📘 Tutorials

Web Scraping with a Headless Browser: A Puppeteer Tutorial — Some examples of how to control Google Chrome with Puppeteer to take screenshots and gather structured data.

Nick Chikovani

Using Sequelize.js and SQLite in an Express.js App

Adam McQuistan

How To Develop a Node.js TCP Server App using PM2 & Nginx

DigitalOcean sponsor

How to Make a Tiny npm Package and Publish It — A gentle walkthrough very much aimed at beginners.

Jonathan Wood beginner

Unit Testing for Node.js Serverless Framework Projects with Jest

Eslam Hefnawy

How To Create an Instagram Bot with Node

Maciej Cieślar

▶ A Day in The Life of a Node.js Core Contributor — See behind the curtain on how things work within the Node.js core project, how decisions are made, and insights into how to get involved yourself.

James M Snell

The Age of "Node.js and…" — "Node.js is so ubiquitous that it's become an accepted, invisible element of the development workflow. It's not the only platform, but it is a universal platform."

Tierney Cyren opinion

🔧 Code and Tools

UPASH: Unified API for Password Hashing Algorithms — The goal of this new project is to present a clean and easy-to-use API to use any password hashing algorithm seamlessly.

Simone Primarosa

Monitoring, Alerting, and Distributed Tracing for Node Apps — Datadog APM now fully supports monitoring and trace analytics for Node.js applications. Try it free.

Datadog sponsor

uuid-mongodb: Generates and Parse MongoDB BSON UUIDs in Node.js — Generates and parses BSON UUIDs for use with MongoDB as BSON UUIDs provide better performance than their string counterparts.

Carmine DiMascio

Taskbook: Command-Line Tasks, Boards and Notes Manager — Manage lists and tasks right from the terminal.

Klaus Sinani

Vialer-js: An Open-Source WebRTC Communication Platform

Vialer