Tessera
Folgen

Marco Ippolito

@marcoippolito.dev

Security Engineer @herodevs | Node.js Technical Steering Committee & Release marcoippolito.dev

215 Posts897 Follower149 Folgt
Darcy Clarke@darcyclarke.me · yesterday

Excited to share vlt 1.0 along with our hosted registries & ecosystem mirrors now GA! A drop-in npm replacement, built so nothing runs on your machine just because you typed install. → faster delivery → malware blocking at the registry layer → graph-native querying

Jake Archibald@jakearchibald.com · 3mo ago

We now have an 'open web API' that requires you to comply with Google's "terms of use". I know many at Chrome disagree with this, but feel they can't say anything publicly out of fear of internal retribution. github.com/mozilla/stan...

Prompt API · Issue #1213 · mozilla/standards-positions

Specification title Prompt API Specification or proposal URL (if available) No response Explainer URL (if available) https://github.com/webmachinelearning/prompt-api/blob/main/README.md Proposal au...

github.com

James Snell@jasnell.me · 4mo ago

We are happy to announce the NodeConf EU is returning in 2026. This time, things will be a little different. While the Irish countryside made for a beauttiful backdrop for getting the community together to talk about Node.js, there have always been a number of logistical challenges to hosting there;

Node.js@nodejs.org · 5mo ago

Node.js is moving to one major release per year starting with Node 27! 🚀 ✅ Simpler: Every release becomes LTS. ✅ Predictable: Version numbers now align with the year. ✅ New: A 6-month Alpha channel for early testing. https://bit.ly/4rnosLg

Node.js — Evolving the Node.js Release Schedule

Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.

nodejs.org

Joyee Cheung@joyeecheung.bsky.social · 6mo ago

This just landed! Thanks @addaleax.bsky.social and @legendecas.bsky.social for the reviews! It will be out in the next semver-minor release of 25, and likely backportable to older LTS - the new workflow is a compatible improvement to the existing postject-based SEA building workflows from v18.x.

Joyee Cheung@joyeecheung.bsky.social · 7mo ago

Made some progress in my hobby project 🎄 Moving single executable application building into Node.js core for better UX/DX, currently works on macOS and Linux and open for feedback! (No Windows yet because I don't take another laptop with me on vacation 😅) github.com/nodejs/node/...

Node.js@nodejs.org · 7mo ago

We appreciate your patience and understanding as we work to deliver a secure and reliable release. Updates are now available for the 25.x, 24.x, 22.x, 20.x Node.js release lines to address: - 3 high severity issues - 4 medium severity issues - 1 low severity issue nodejs.org/en/blog/vuln...

Node.js — Tuesday, January 13, 2026 Security Releases

Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.

nodejs.org

Rafael Gonzaga | Node.js@rafaelgss.dev · 7mo ago

Node.s sec release We are doing our best. We are ensuring test passes on all platforms and all active release lines (v20, v22, v24 and v25) - and they aren't currently. Unfortunately, we don't have an ETA for that, and it's likely that this security release will be postponed one more time. Sorry.

Marco Ippolito@marcoippolito.dev · 8mo ago

⚠️ Node.js security release has been postponed ⚠️ We have decided to delay the security release further to January 7th 2026 to ensure the team has enough time to prepare the releases and avoid distruptions during the holiday season. nodejs.org/en/blog/vuln...

Node.js — Wednesday, January 7, 2026 Security Releases

Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.

nodejs.org