Q2 2026 brought a Node.js 26 release, a major security release addressing 18 vulnerabilities with a streamlined 36-to-7-step process, the removal of the security embargo requirement, and a new LLM-assisted report classifier and web viewer for release management.

The OpenJS Foundation is excited to welcome SQLRooms as a new project within the Open Visualization Working Group as part of the vis.gl open source project, expanding the growing ecosystem of open source tools that help developers explore, analyze, and visualize data on the web.

Today, the team is shipping v3 – the most significant release in the project's history.

Security update for December 2025 – March 2026 | Powered by the Alpha-Omega Partnership

AI is changing how software vulnerabilities are discovered and how quickly they are reported. For community-led open source projects, this shift is both promising and deeply challenging.

The OpenJS Foundation, supported by generous funding from Alpha-Omega, made significant progress strengthening security for Node.js and the wider OpenJS project ecosystem in 2025.

With the release of Lodash 4.17.23 and the publication of CVE-2025-134655, the project is making visible progress in strengthening its security posture.

From new threat modeling practices to ecosystem-wide coordination, npm security discussions, and major Node.js security enhancements, this update recaps the key progress made in October 2025.

Perspective Joins OpenJS Foundation to Broaden Community Impact

With OpenJS support, Lodash is becoming more secure, more modern, and guided by a broader community of contributors

Lit joins a neutral home within the OpenJS Foundation community

A New Era for React, and a Stronger JavaScript Ecosystem

Providing Hosted Projects with the Tools and Guidance to Manage Security Confidently

GeoDa AI will be part of the OpenJS Foundation's Open Visualization Collaboration Space, joining other open source tools that make working with complex visual data easier.

From vulnerability patching to release automation to better governance processes, here’s what’s been happening behind the scenes from January through June.

From critical security updates to improved automation, policy updates, and major release planning, this post covers the highlights from March and April 2025.

We're pleased to announce the addition of cosmos.gl to the OpenJS Foundation as an incubating project! cosmos.gl is a GPU-accelerated force-directed graph layout and rendering engine that empowers developers, researchers, and analysts to interact with massive, complex datasets—right in the browser.

Now Available from HeroDevs to Help Ensure Security and Compatibility

WebdriverIO v9 is now available! With this release, WebdriverIO offers much greater automation capabilities than ever before thanks to the new WebDriver Bidi protocol.

NativeScript 8.8 introduces CSS Media Query support, continues with WinterCG compliance, SF Symbol usage with effects, Kotlin 2 + Gradle 8, platform type deprecation + version annotations and more.

OpenJS Foundation announces new initiative that supports the security and sustainability of the JavaScript and web ecosystem.

The vis.gl project is excited to announce the official release of @vis.gl/react-google-maps v1.0, a library that bridges the gap between the popular React.js framework and the extensive capabilities of the Google Maps JavaScript API.

Jest has graduated! Jest is a JavaScript testing framework that allows you to write tests with an API with little configuration. They are now an at-large project.

This month's security progress report featured new security releases for Node.js, updates to the permission model, progress on automation of security releases and talks in the community.

On April 24, 2004, Dojo was released and became one of the pioneering JavaScript libraries aimed at simplifying and standardizing web development. Happy 20 years!

The release of Node.js 22 is available now! ​​Highlights in Node.js 22 include require()ing ESM graphs, WebSocket client, updates of the V8 JavaScript engine, and more!

The new Healthy Web Checkup tool is easy to use tool and checks for the latest versions of popular web technology jQuery.

Hear from Hitachi's Kazuhito Yokoi to find out more about Node-RED and why it is becoming so popular in Industrial IoT applications.