#NodeConf EU is back! If you've been working on something worth sharing about #Node.js internals, performance, #developer experience, or anything in between, this is the stage for you! nodeconf.eu See you in Bologna! 🇮🇹
Robin Bender Ginn
@rginn206.bsky.social
Executive Director at OpenJS Foundation amateur drummer she/her
Node.js Interactive returns at RenderATL 2026. Join maintainers, contributors, and developers for two days of talks on Node.js performance, security, AI tooling, infrastructure, and the real world challenges of running JavaScript at scale. https://bit.ly/43aFSBs
Fave keynote, especially hearing how Christina Koch handles being the only woman in a room of 10 engineers. 🚀“What we do as astronauts is chair fly a situation…identify and then strategize.” She’s so cool. And she surfs, too! ✨
OpenJS Foundation@openjsf.org · 5mo agoThrowback Thursday: Christina Koch is taking off 🚀 and will be the first woman to journey around the moon. In 2020, she spoke at OpenJS World about what life is like in outer space as an international crew member of the ISS, and being a female in STEM. Recap here: https://bit.ly/4smsjsQ
Along with the blog post there's a recording of the interview. Listen to the full interview OR the last 10 minutes (linked). www.youtube.com/watch?v=ZbWx...
Burnout Is Real for Open Source Maintainers: A Conversation with John-David Dalton, Lodash Creator
YouTube video by OpenJS Foundation
youtube.com
OpenJS Foundation@openjsf.org · 5mo agoLodash gets 100M+ downloads a day. For years, it was maintained by one person: John-David Dalton Then life happened. He stepped back. Open source isn’t just code. It’s people. Read about our conversation about burnout with John-David here: https://bit.ly/3NWa92P
"Open source dependencies should be treated as part of the security perimeter, the systems you are responsible for securing, even if you don’t control them." - @rginn206.bsky.social
OpenJS Foundation@openjsf.org · 5mo ago"The biggest supply-chain risk isn’t abandoned code. It’s unsupported ecosystems." At RSAC 2026, @rginn206.bsky.social outlined a consistent pattern across ecosystems: when maintainer capacity does not scale with dependency usage, security risk increases. Read more on the blog: bit.ly/3PzHKA0
Lodash v4.17.23 is live and features a whole new look for security 😎🔥 Security fixes, stronger governance, and improved maintenance = safer and more reliable for your projects. Check it out 👇 hubs.la/Q03_NX2J0
Lodash Rolls Out Major Security Overhaul | OpenJS Foundation
With the release of Lodash 4.17.23 and the publication of CVE-2025-13466, the project is making visible progress in strengthening its security posture.
hubs.la
npm has revoked classic tokens for publishing, pushing maintainers toward OIDC trusted publishing or granular tokens. But @openjsf.org warns trusted publishing still has risky gaps for critical projects. What maintainers should do next: socket.dev/blog/npm-rev... #NodeJS #JavaScript
npm Revokes Classic Tokens, as OpenJS Warns Maintainers Abou...
GitHub has revoked npm classic tokens for publishing; maintainers must migrate, but OpenJS warns OIDC trusted publishing still has risky gaps for crit...
socket.dev
JavaScript is 30. Still running the web & still our favorite. 💛✨ The OpenJS Foundation is grateful for every contributor who has shaped its path, and we look forward to the continued growth of this community.
ICYMI: We wrote some concrete npm security suggestions for JavaScript maintainers to help guard against Shai-Hulud style attacks. 👇 openjsf.org/blog/publish...
Publishing More Securely on npm: Guidance from the OpenJS Security Collaboration Space | OpenJS Foundation
The OpenJS Security Collaboration Space has been working closely with GitHub’s npm team to understand how new security features affect projects and maintainers, especially as threats and tools keep ev...
openjsf.org
With npm supply chain attacks on the rise, secure publishing practices are becoming a pressing concern for anyone maintaining npm packages. ⚠️ We've released updated guidance to help maintainers reduce exposure, strengthen release processes, and protect the ecosystem: openjsf.org/blog/publish...
Publishing More Securely on npm: Guidance from the OpenJS Security Collaboration Space | OpenJS Foundation
The OpenJS Security Collaboration Space has been working closely with GitHub’s npm team to understand how new security features affect projects and maintainers, especially as threats and tools keep ev...
openjsf.org
Welcome, Perspective! Our newest incubating project brings advanced real-time analytics and visualization tools to the open source JavaScript ecosystem. Big thanks to our friends at JP Morgan and FINOS. 💙 hubs.la/Q03Q_c8q0
Perspective Joins the OpenJS Foundation as an Incubating Project | OpenJS Foundation
Perspective Joins OpenJS Foundation to Broaden Community Impact
hubs.la
We’ll be gathering in SF to celebrate Mikeal Rogers . A night he would’ve loved, and a fundraiser to support his family. 💚 Hope you can join. an-event-mikeal-would-have-liked.com
An Event Mikeal Would Have Liked
Memorial charity event celebrating Mikeal Rogers' life - November 12, 2025
an-event-mikeal-would-have-liked.com
Robin Bender Ginn@rginn206.bsky.social · last yr.On the shoulders of giants. Mikeal was a friend and constant spark for good. I’ll miss his voice, his heart, and his drive to make things better. ❤️
So cool to be in the room at React Conf when the new React Foundation was announced 💙 with its new home at the Linux Foundation. At @openjsf.org we’re celebrating this big win for JavaScript communities.
OpenJS Foundation@openjsf.org · 10mo agoNew Era for React = Stronger JavaScript Ecosystem 💙 React doesn’t live in isolation - It works alongside Node.js, Electron, webpack, and more. A dedicated foundation under the Linux Foundation means more collaboration, security, and sustainability across the ecosystem. hubs.la/Q03MylxX0
Open source foundations don’t run on “magic piles of money.” Registries, CDNs, CI pipelines, security response and compliance work all require sustained support. Read why OpenJS joined peers in signing “Open Infrastructure is Not Free.” 🔗 hubs.la/Q03KtFgr0
New Pride spotlight from @thisismissem.social 🌈💚 She shares how coming out and contributing to open source shaped her journey in tech. Read it here: nodejs.org/en/blog/comm...
Happy Pride 🌈 In our latest blog post, @vcarl.com shares a powerful reflection on open source and identity: nodejs.org/en/blog/comm... We're spotlighting LGBTQ voices in the Node.js community. Got a story to share? Submit a PR: github.com/nodejs/nodej...
We’re heartbroken by the loss of Mikeal Rogers, a key figure in the Node.js ecosystem and a force behind what makes this community what it is. To help preserve his legacy, we’ve opened a GitHub repo for stories, photos, and memories: github.com/nodejs/mikeal 💚 Thank you, Mikeal. hubs.la/Q03t0DVL0
GitHub - nodejs/mikeal: In light of the the contributions that Mikeal made to Node.js and the larger ecosystem and his recent passing this repository will provide a place for people to contribute thei...
In light of the the contributions that Mikeal made to Node.js and the larger ecosystem and his recent passing this repository will provide a place for people to contribute their condolences and mem...
hubs.la
Mikeal was an expert collaborator. When we would discuss something, he'd throw out an "impossible idea" and then talk himself into a path by working with a few of the right people. And then he'd set off and do it. Mikeal was a force that defied Newton's 3rd law. He will be missed by many.
OpenJS Foundation@openjsf.org · last yr.We’re deeply saddened to mark the passing of Mikeal Rogers after a courageous fight with cancer. Mikeal wasn’t just a leader in the open source world. He was a connector, a builder of community, and someone who showed up for others in meaningful ways. Thank you, Mikeal 💚 hubs.la/Q03s_C7G0
On the shoulders of giants. Mikeal was a friend and constant spark for good. I’ll miss his voice, his heart, and his drive to make things better. ❤️
OpenJS Foundation@openjsf.org · last yr.We’re deeply saddened to mark the passing of Mikeal Rogers after a courageous fight with cancer. Mikeal wasn’t just a leader in the open source world. He was a connector, a builder of community, and someone who showed up for others in meaningful ways. Thank you, Mikeal 💚 hubs.la/Q03s_C7G0
The OpenJS Foundation is now a CNA for 40 hosted #JavaScript projects, including ESLint, Express, webpack, Fastify, Electron & more. It can assign CVEs, but each project still owns its own disclosure process. ☂️ Learn more: socket.dev/blog/openjs-... #CVE #CyberSecurity
OpenJS Foundation Is Now a CNA for 40+ JavaScript Projects U...
New CNA status enables OpenJS Foundation to assign CVEs for security vulnerabilities in projects like ESLint, Fastify, Electron, and others, while lea...
socket.dev
We're excited to welcome cosmos.gl to the OpenJS Foundation! 🌠 A fast, WebGL-powered graph engine that can render 1M+ nodes, right in the browser. Let’s build the future of open viz together ✨ Learn more: openjsf.org/blog/introdu...
Always blown away by how cool our OpenJS Board Directors are!
OpenJS Foundation@openjsf.org · last yr.Say hi 👋 to our 2025 OpenJS Foundation Board of Directors! We're thrilled to introduce a new face and celebrate the re-election of six board directors. 🎉 More details on our blog: openjsf.org/blog/openjs-...
Maintainers give so much, ask so little. The new Partner Pack is a small thank-you — with tools, training & perks made just for you. maintainermonth.github.com/partner-pack #MaintainerMonth
🎧 #JavaScript powers 98% of all websites. In the latest podcast, Robin Bender Ginn from OpenJS discusses sustaining JavaScript at scale, web security, and community solutions. Learn More about JSConf North America: events.linuxfoundation.org/jsconf-north... Listen Here: openssf.org/podcast/2025...
We had a lot of productive discussions at the Node.js collaboration summit in Paris. Huge thanks to our host @datadoghq.com! Find the notes in https://github.com/openjs-foundation/summit/issues/433 - we'll publish the recordings and a trip report soon!
Node.js Collaboration Summit 2025 / Paris · Issue #433 · openjs-foundation/summit
Date: April 1-2, to be close to when dotJS happens. During the night of 1st we'll have an additional meetup to connect with the local developer community. Venue: Datadog's office (21 Rue de Château...
github.com
🚀 #JSConf 2025 is coming ⏰ Save the date: Early Bird tickets open March 10-12 ✅ Save your spot before they sell out 🎤 Want to speak at JSConf? Our Call for Proposals is open through May 11 💡 Topics: Testing, Security, CI/CD, Development & more ✅ Submit now: events.linuxfoundation.org/jsconf-north...
Call For Proposals (CFP) | LF Events
The one-of-a-kind event for all things related to JavaScript (JS) on the web is back and brings together the best and brightest JS programmers. sUBMIT A PROPOSAL Please be aware that we will now be…
events.linuxfoundation.org
Thanks Brian and Eric for having me on your show!
Igalia@igalia.com · 2y ago🎙️New Episode of Igalia Chats: Magic Piles of money www.igalia.com/chats/magic-... @bkardell.com and @meyerweb.com chat with @rginn206.bsky.social the Executive Director of the @openjs.bsky.social, about open source, funding, governance, billions of dollars, and foundations.
Hello World. Meet some of my awesome friends. go.bsky.app/DmKWw1e