Node.js Security Progress Report – Active Outreach to a Growing Node.js Security Community
Check out what we've been up to in this edition of our Node.js Security Progress Report.
From OpenJS World 2023: Using Machine Learning Models in JavaScript Application - Aileen Villanueva Lecuona, Endava
Talk from Aileen Villanueva Lecuona, Endava, at OpenJS World 2023 in Bilbao, Spain, September 19-21, 2023.
It's Cyber Monday! Take 65% off Node.js Training
In honor of Cyber Monday, take 65% off Node.js Training and Certification until December 4.
From OpenJS World 2023: Revolutionizing Browser Automation: A Deep Dive into the WebDriver BiDi Project and its Integration with Selenium – Tamsil Sajid Amani
Talk from Tamsil Sajid Amani, Software Engineer at BrowserStack at OpenJS World 2023 in Bilbao, Spain, September 19-21, 2023.
Node.js Security Progress Report – Security Release and Node.js 21
October was busy due to the latest security release affecting Node.js 18 and Node.js 20. Usually, we lock in the Continuous Integration (CI) cycle at least 5 days before a release. This time, however, due to the recent changes to the CITGM (Canary In The Gold Mine: a simple tool for pulling down an arbitrary module from npm and testing it using a specific version of the node runtime) and changes to the automation of the security release proposal, it was just 3 days.
Better Features and Operational Benefits Come with Current jQuery Use
The OpenJS Foundation, working with its community, continues to deliver regular updates to the widely-used jQuery solution. IDC conducted research on the use of jQuery in the U.S., Germany and the U.K., with a total of 509 survey respondents in those three countries representing small, medium and large businesses across 23 distinct industries.
OpenJS Foundation Warns Consumer Privacy and Security at Risk in Three-Quarters of a Billion Websites
OpenJS Foundation reports poor security practices across industries in North America, UK and Europe.
Node.js Security Progress Report – Looking Into SBOM for Node.js
September was a busy month with participation in 3 different events, regular work on security reports, and discussions around creating an SBOM for Node.js.
Node.js 21 Available Now!
The release of Node.js 21 is available now! Node.js 21 replaces Node.js 20 as our current release line, and Node.js 20 is being promoted to long-term support (LTS).
How the Wikimedia Foundation Balances Security and Open Information in Web Development
The Wikimedia Foundation is the non-profit that hosts Wikipedia and other free knowledge and open data projects. These projects are made possible by a global community who, together with the Foundation, comprise the “Wikimedia movement”. The Wikimedia movement is united by a vision: to bring about a world in which every single human being can freely share in the sum of all knowledge. We talked with Timo Tijhof, Principal Engineer at the Wikimedia Foundation, to find out how the organization approaches security and performance at scale.
Node.js Security Progress Report - September Community Engagement
Read our progress report on Node.js security in the month of August.
Join us in Shanghai for OpenJS World China
We’re excited to be at Open Source Summit in Shanghai, China from September 26-28!
Node.js Security Progress Report – Fewer Steps and More Releases
In July, we continued our regular work triaging and fixing Node.js security issues
Node.js Security Progress Report – Fewer Steps and More Releases
In July, we continued our regular work triaging and fixing Node.js security issues. We also welcomed a new contributor to the Node.js Security Working Group team, and increased the number of security releases, which improves security by making updates available more quickly. We have also continued to evaluate the Permission Model including adding a startup benchmark, adding support for V8 HeapSnapshot and Node.js reports, and cut down the number of steps it takes to create a security release.
From OpenJS World 2023: How the npm CLI Team Manages (Almost) 100 Open Source Projects – Luke Karrys
Talk from Luke Karrys, Senior Software Engineer at GitHub at OpenJS World 2023 in Vancouver, Canada, May 10-12.
From OpenJS World 2023: Responsible Use of Node.js & Open Source Software Utilizing Best Practices at an Enterprise Level – Stephen Husak
Talk from Stephen Husak, Distinguished Engineer, Capital One at OpenJS World 2023 in Vancouver, Canada, May 10-12.
From OpenJS World 2023: How to Develop Custom Node-RED Connectors without Coding – Kazuhito Yokoi
Talk from Kazuhito Yokoi, Software Engineer, Hitachi, Ltd. at OpenJS World 2023 in Vancouver, Canada, May 10-12.
Quick Start for New Sovereign Tech Fund Activities to Strengthen JavaScript
In May this year, the OpenJS Foundation announced the largest one-time government support investment ever to a Linux Foundation project.
From OpenJS World 2023: Securing Your Software Supply Chain – Darcy Clarke
Talk from Darcy Clarke, Open Source Engineer, Independent at OpenJS World 2023 in Vancouver, Canada, May 10-12.
Node.js Security Progress Report – 17 Reports Closed
In June, we saw all of our Node.js security metrics trending in the right direction.
From OpenJS World 2023: Sustaining Open Source Software: Exploring Community, Financial, and Engineering Practices – Abigail Cabunoc Mayes
Talk from Abigail Cabunoc Mayes, Program Manager, GitHub at OpenJS World 2023 in Vancouver, Canada, May 10-12.
Visualizing Success: Year One of the OpenVis Collaboration Space
It’s been one year since the inception of the Open Visualization Collaboration Space!
From OpenJS World 2023: To Rewrite, or Not to Rewrite, That Is the Question – Bryan Hughes
Talk from Bryan Hughes, Staff Software Engineer, Patreon at OpenJS World 2023 in Vancouver, Canada, May 10-12.
Appium 2.0 Officially Released: Extensible Ecosystem for Automation Makes It Easy to Add Your Specific Tests
We’re delighted to share that Appium 2.0 is now available!
From OpenJS World 2023: The Evolution of Open Source through Design – Lise Noble
Talk from Lise Noble, UX/UI Distinguished Engineer, Discover Financial at OpenJS World 2023 in Vancouver, Canada, May 10-12.
From OpenJS World 2023: Advancing Web Runtime Interoperability with WinterCG – Ethan Arrowood, Vercel
Talk from Ethan Arrowood, Senior Software Engineer, Vercel at OpenJS World 2023 in Vancouver, Canada, May 10-12.
Node.js Security Progress Report – First Response Time Down to 8 Hours, New Security Release Announced
Last month, we reported that the first response time in April was down to 18 hours.
Node.js Security Progress Report – Automation, Automation and more Automation
Last month, the Security Working Group initiatives focused on the Permission Model and Automated Update Dependencies.
OpenJS World 2023 – Celebrating Innovation in the JavaScript Ecosystem
It’s day one of OpenJS World, the OpenJS Foundation’s semi-annual event bringing together the JavaScript and web development communities!
JavaScriptLandia Community Awards Showcase Creativity, Diversity and Energy
From OpenJS World 2023 – The OpenJS Foundation is celebrating 6 key community leaders, honoring them with our second annual JavaScriptLandia Awards for contributions to education, standards, security and more. Award Winners were recognized at OpenJS World on Wednesday, May 10, and received a plaque and digital badge.