Open Source Data Visualization Project deck.gl v9 Released
WebGPU enablement combines with new community-based features that include improved GPU-based data filtering, more intuitive first-person views, and a new flexible widget system.
HeroDevs Joins OpenJS Foundation
New Gold member provides services to secure and support end-of-life open source packages
OpenJS Foundation Welcomes Greyshore Associates as Member
Network of experienced technologists provides consulting and delivery services, now a part of the OpenJS Foundation
CarGurus Joins OpenJS Foundation, Showcasing a Commitment to Open Source Software
CarGurus has joined the OpenJS Foundation as a silver member.
Why Should You Care About Package Metadata Interoperability?
Node.js Security Progress Report – Progress on Permission Model, Fuzzer and Connections with Community
Check out what we've been up to in this edition of our Node.js Security Progress Report.
Introducing kepler.gl 3.0
Version 3.0 of kepler.gl is now available, bringing new geospatial features to kepler.gl application users and dramatic improvements to developers using the kepler.gl libraries.
From OpenJS World 2023: OWASP Top 10 Vulnerabilities in Node.js - Marco Ippolito
Talk from Marco Ippolito, Senior Developer Experience Engineer, NearForm, at OpenJS World 2023 in Bilbao, Spain, September 19-21, 2023.
OpenJS Security Audit for nvm Completed Successfully
OpenJS Foundation and 7ASecurity collaborated on the nvm security audit with the Open Source Technology Improvement Fund (OSTIF) as a result of the latest funding from the Sovereign Tech Fund.
Node.js Security Progress Report – Active Outreach to a Growing Node.js Security Community
Check out what we've been up to in this edition of our Node.js Security Progress Report.
From OpenJS World 2023: Using Machine Learning Models in JavaScript Application - Aileen Villanueva Lecuona, Endava
Talk from Aileen Villanueva Lecuona, Endava, at OpenJS World 2023 in Bilbao, Spain, September 19-21, 2023.
It's Cyber Monday! Take 65% off Node.js Training
In honor of Cyber Monday, take 65% off Node.js Training and Certification until December 4.
From OpenJS World 2023: Revolutionizing Browser Automation: A Deep Dive into the WebDriver BiDi Project and its Integration with Selenium – Tamsil Sajid Amani
Talk from Tamsil Sajid Amani, Software Engineer at BrowserStack at OpenJS World 2023 in Bilbao, Spain, September 19-21, 2023.
Node.js Security Progress Report – Security Release and Node.js 21
October was busy due to the latest security release affecting Node.js 18 and Node.js 20. Usually, we lock in the Continuous Integration (CI) cycle at least 5 days before a release. This time, however, due to the recent changes to the CITGM (Canary In The Gold Mine: a simple tool for pulling down an arbitrary module from npm and testing it using a specific version of the node runtime) and changes to the automation of the security release proposal, it was just 3 days.
Better Features and Operational Benefits Come with Current jQuery Use
The OpenJS Foundation, working with its community, continues to deliver regular updates to the widely-used jQuery solution. IDC conducted research on the use of jQuery in the U.S., Germany and the U.K., with a total of 509 survey respondents in those three countries representing small, medium and large businesses across 23 distinct industries.
OpenJS Foundation Warns Consumer Privacy and Security at Risk in Three-Quarters of a Billion Websites
OpenJS Foundation reports poor security practices across industries in North America, UK and Europe.
Node.js Security Progress Report – Looking Into SBOM for Node.js
September was a busy month with participation in 3 different events, regular work on security reports, and discussions around creating an SBOM for Node.js.
Node.js 21 Available Now!
The release of Node.js 21 is available now! Node.js 21 replaces Node.js 20 as our current release line, and Node.js 20 is being promoted to long-term support (LTS).
How the Wikimedia Foundation Balances Security and Open Information in Web Development
The Wikimedia Foundation is the non-profit that hosts Wikipedia and other free knowledge and open data projects. These projects are made possible by a global community who, together with the Foundation, comprise the “Wikimedia movement”. The Wikimedia movement is united by a vision: to bring about a world in which every single human being can freely share in the sum of all knowledge. We talked with Timo Tijhof, Principal Engineer at the Wikimedia Foundation, to find out how the organization approaches security and performance at scale.
Node.js Security Progress Report - September Community Engagement
Read our progress report on Node.js security in the month of August.
Join us in Shanghai for OpenJS World China
We’re excited to be at Open Source Summit in Shanghai, China from September 26-28!
Node.js Security Progress Report – Fewer Steps and More Releases
In July, we continued our regular work triaging and fixing Node.js security issues
Node.js Security Progress Report – Fewer Steps and More Releases
In July, we continued our regular work triaging and fixing Node.js security issues. We also welcomed a new contributor to the Node.js Security Working Group team, and increased the number of security releases, which improves security by making updates available more quickly. We have also continued to evaluate the Permission Model including adding a startup benchmark, adding support for V8 HeapSnapshot and Node.js reports, and cut down the number of steps it takes to create a security release.
From OpenJS World 2023: How the npm CLI Team Manages (Almost) 100 Open Source Projects – Luke Karrys
Talk from Luke Karrys, Senior Software Engineer at GitHub at OpenJS World 2023 in Vancouver, Canada, May 10-12.
From OpenJS World 2023: Responsible Use of Node.js & Open Source Software Utilizing Best Practices at an Enterprise Level – Stephen Husak
Talk from Stephen Husak, Distinguished Engineer, Capital One at OpenJS World 2023 in Vancouver, Canada, May 10-12.
From OpenJS World 2023: How to Develop Custom Node-RED Connectors without Coding – Kazuhito Yokoi
Talk from Kazuhito Yokoi, Software Engineer, Hitachi, Ltd. at OpenJS World 2023 in Vancouver, Canada, May 10-12.
Quick Start for New Sovereign Tech Fund Activities to Strengthen JavaScript
In May this year, the OpenJS Foundation announced the largest one-time government support investment ever to a Linux Foundation project.
From OpenJS World 2023: Securing Your Software Supply Chain – Darcy Clarke
Talk from Darcy Clarke, Open Source Engineer, Independent at OpenJS World 2023 in Vancouver, Canada, May 10-12.
Node.js Security Progress Report – 17 Reports Closed
In June, we saw all of our Node.js security metrics trending in the right direction.
From OpenJS World 2023: Sustaining Open Source Software: Exploring Community, Financial, and Engineering Practices – Abigail Cabunoc Mayes
Talk from Abigail Cabunoc Mayes, Program Manager, GitHub at OpenJS World 2023 in Vancouver, Canada, May 10-12.