#NODEJS

2026-02-05

🔍 peer-dependency-checker: Stop Breaking Builds

Check dependency compatibility BEFORE you upgrade. One command setup, works with npm, yarn, pnpm, or bun.

npx peer-dependency-checker setup

hyperdrift.io/apps/peer-depend

2026-02-05

The pain when trying to imagine something running as a CLI program that's a good POSIX-y citizen but also does complicated dynamic async stuff internally. #Nodejs has a stupid tcsetattr stomp. #Python's async story feels weak. Got curious about #Elixir/#Erlang relatively speaking, looked at erl_signal_server to see about cleaning up on SIGINT instead of triggering emulator break, but it's not in the handleable list! --erl +Bd allows classic immediate exit, but not cleanup. Argh.

FullStack Bulletinfstackbulletin
2026-02-05
Jared Wrayjaredwray
2026-02-05

Really impressed with the performance improvement eventemitter3 now has. For the longest time hookified github.com/jaredwray/hookified was faster. 7% is pretty decent.

2026-02-04

MongoDB, Clerk и Nginx-прокси: строим горизонтально масштабируемую архитектуру почти бесплатно

Всем привет! В этой статье я расскажу как после Хабра-эффекта от предыдущей статьи настало время переезжать с грозного монолита на масштабируемую архитектуру с разделением на API, Web и Auth сервисы. Как я сделал тестовый контур и перевёл туда всё тестирование сервиса. С какими сложностями пришлось столкнуться и почему связка Bun+Vercel может преподнести неприятный сюрприз в виде много часовой отладки.

habr.com/ru/articles/992496/

#nosq #nodejs #проектирование_систем #безопасность_вебприложений #безопасность_данных

Introducing Verabase, a new mini components library built for SudoVanilla projects and more. The project is new and is limited to only tooltip, dropdown, and context menu. There are no plans to make this a full-on components library.

Verabase was built to only handle small things.

Release: releases.sudovanilla.org/Korbs
Package: registry.sudovanilla.org/js/@s
Source Code: ark.sudovanilla.org/Korbs/Vera

#opensource #development #astro #components #js #javascript #nodejs

2026-02-03

🥳 New module release: Hetzner Cloud OpenAPI Client

codeberg.org/small-tech/hetzne

This is an OpenAPI client for Node.js generated from the official Hetzner Cloud OpenAPI specification using Massimo.

Recently, while reviewing the code for Catalyst¹, I realised that the Hetzner library I was using was deprecated. The only other client library listed on Awesome Hetzner Cloud for JavaScript was updated seven years ago². So I did a bit of research and discovered that Hetzner has an official OpenAPI specification (useful little things that you can generate documentation as well as working client code from). I also discovered Massimo³, a lightweight and easy to use OpenAPI client generator.

So, anyway, a few minutes later, I had a working Node.js client generated but I thought I’d take a little more time to make it into a module in case anyone else wanted to use it.

In the process, I also created a simple web app example with Kitten⁴ where you can enter your Hetzner API key in a web interface, have it persisted to the default Kitten database⁴ and then carry out a simple call to list your servers. It’s 99 lines of code, including comments, in a single file. (Because Kitten loves you.)

The example uses the new/advanced class and event-based way of working with Kitten so you might find it interesting for that reason too (I haven’t had the chance to document this workflow properly yet). It also showcases Kitten’s Streaming HTML⁵ workflow, as well as its built-in support for semantic default styles and its first-class Markdown support.

You can see the source code for the Kitten example here:
codeberg.org/small-tech/hetzne

The cool thing is that because the client is generated from the official Hetzner OpenAPI specification, it’s one command to update it should the specification change and you can be sure it matches exactly what’s in the API documentation.

Enjoy!

💕

CC @hetzner @lenzgr

¹ catalyst.small-web.org
² github.com/hetznercloud/awesom
³ massimohttp.dev/
kitten.small-web.org/tutorials
kitten.small-web.org/tutorials

#Hetzner #HetznerCloud #API #OpenAPI #Massimo #NodeJS #JavaScript #servers #hosting #VPS #Kitten #SmallWeb #SmallTech

Screenshot of the Hetzner Cloud OpenAPI Client Example running in a browser at https://localhost

Heading: Cloud OpenAPI Client Example.

This is a Kitten app that demonstrates basic usage of the Hetzner Cloud OpenAPI client generated using Massimo from Hetzner's official OpenAPI specification.

H2: Setup

Label: API Token
Password input box with 64 dots

H2: Test
List servers button

Result of having pressed the button is a list of seven servers (the scrollbar indicates there are more that are not visible):

1. small-web.org (running) – CPX 11 (x86, 2 cores, 2GB RAM, 40GB storage)
2. owncast.small-web.org (running) – CPX 11 (x86, 2 cores, 2GB RAM, 40GB storage)
3. kittens.small-web.org (running) – CPX 11 (x86, 2 cores, 2GB RAM, 40GB storage)
4. kitten.small-web.org (running) – CPX 11 (x86, 2 cores, 2GB RAM, 40GB storage)
5. draw-together.small-web.org (running) – CPX 11 (x86, 2 cores, 2GB RAM, 40GB storage)
6. accessibilityforeveryone.small-web.org (running) – CPX 11 (x86, 2 cores, 2GB RAM, 40GB storage)
7. kitten-kawaii.small-web.org (running) – CPX 11 (x86, 2 cores, 2GB RAM, 40GB storage)
Luciano Mamminoloige@mastodon.ie
2026-02-03

I almost approved a security hole last year. A simple image server that let anyone read any file on the filesystem.

The input `../../etc/passwd` sailed right through `path.join()`. Oops.

Path traversal is one of the most exploited vulnerabilities in recent years, yet it's still too easy to write code that's exposed to it.

I wrote a guide on how to prevent it in Node.js (with lots of code examples):

nodejsdesignpatterns.com/blog/

#nodejs #security #webdev

2026-02-02
#JeChercheUnJob pas moi mais un pote dev qui n'est pas ici :

Si vous cherchez un développeur soucieux des performances, qui aime optimiser ses logiciels, et sait aussi faire du front léger et efficace n'hésitez pas à jeter un œil au profil et CV de Thibault.

Il fait principalement du compilé côté backend avec du Rust, Go, C#, C++ mais aussi du NodeJS.

Côté open-source ses derniers plus grands projets sont clairement ses plugins autour de The Witcher 3.

Toutes les infos, son portfolio et son CV sont ici :
https://t.hottou.fr/lfj-fr.pdf

Hésitez pas à retoot ;)

#Rust #Go #NodeJS #CSharp #CPP
2026-02-02

:javascript: Critical vm2 Node.js Flaw allows Sandbox Escape and Arbitrary Code Execution.

A critical sandbox escape vulnerability has been disclosed in the popular vm2 Node.js library that, if successfully exploited, could allow attackers to run arbitrary code on the underlying operating system.

⁉️The vulnerability, tracked as CVE-2026-22709, carries a CVSS score of 9.8 out of 10.0 on the CVSS scoring system.⁉️

endorlabs.com/learn/cve-2026-2

#vm2 #nodejs #sandbox #escape #arbitrary #code #execution #it #security #privacy #engineer #media #secure #javascript #programming #developer #tech #news

⁉️"In vm2 for version 3.10.0, Promise.prototype.then Promise.prototype.catch callback sanitization can be bypassed," vm2 maintainer Patrik Simek said. "This allows attackers to escape the sandbox and run arbitrary code."⁉️

<https://github.com/patriksimek/vm2/security/advisories/GHSA-99p7-6v5w-7xg8>

vm2 is a Node.js library used to run untrusted code within a secure sandboxed environment by intercepting and proxying JavaScript objects to prevent sandboxed code from accessing the host environment.

<https://github.com/patriksimek/vm2>

<https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Proxy>

The newly discovered flaw stems from the library's improper sanitization of Promise handlers, which creates an escape vector that results in the execution of arbitrary code outside the sandbox boundaries.

<https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Promise>

"The critical insight is that async functions in JavaScript return `globalPromise` objects, not `localPromise` objects. Since `globalPromise.prototype.then` and `globalPromise.prototype.catch` are not properly sanitized [unlike `localPromise`]," Endor Labs researchers Peyton Kennedy and Cris Staicu said.

👾In light of the criticality of the flaw, users are recommended to update to the most recent version [3.10.3], which comes with fixes for additional sandbox escapes.👾

<https://github.com/patriksimek/vm2/releases/tag/v3.10.3>
2026-02-02

🚀 Đã ra mắt pdftxt.dev – API đơn giản để trích xuất văn bản từ PDF chỉ trong 48h cuối tuần!
✅ 100 yêu cầu miễn phí/tháng (tạo API key)
✅ Không phí đăng ký, giá VPS khoảng $5/tháng (Node.js, DigitalOcean)
✅ Mục tiêu: kiểm tra nhu cầu API đơn nhiệm, không chạy lợi nhuận

Bạn có dùng không? Muốn tính năng gì thêm?

#PDF #API #SideProject #CôngCụ #Nodejs #DigitalOcean #Startup #FreeAPI #CôngNghệ #LậpTrình #KinhDoanh #VietnamTech

reddit.com/r/SideProject/comme

2026-02-01

Tired of bulky AI frameworks? 🛠️

Check out SocietyAI: A lightweight, zero-dependency TypeScript library for collaborative multi-agent systems.

Sequential, parallel, or collaborative workflows—fully configurable and model-agnostic.

Star it on GitHub: github.com/benoitpetit/society
Npm : npmjs.com/package/societyai

#SoftwareEngineering #Tech #NodeJS #TypeScript #MultiAgent #AI #OpenSource #NPM

workflow societyai npm package
Rad Web Hostingradwebhosting
2026-02-01

cPanel Shared Hosting Server Specs This article provides an in-depth analysis of our Shared Hosting server specs and features powering the 100%-SSD cPanel Hosting services.

cPanel Shared Hosting Server Specs
The ...
Continued 👉 blog.radwebhosting.com/cpanel-

Frontend Dogmafrontenddogma@mas.to
2026-01-31
2026-01-31

#28 No libraries, no canvas, only HTML elements.

There are many elements but because I was late with this prompt I already saw buttons and checkboxes, so I picked the slider and experimented.

And yes, I'm curious what I could do with sliders in the future - beside a slide puzzle. ;)

#genuary #html #css #slider #genart #art #mastoart #fediart #p5js #noai #genuary2026 #code #math #programming #artwork #minimalism #coding #generativeart #generative #artforsale #simplify #creativecoding #random #web #dev #frontend #website #apache #ajax #js #nodejs

20 slider, 10 on the left and 10 on the right, and the buttons on them forming a circle.
Ash_CrowAsh_Crow
2026-01-31

"Some say is better because it has a bigger community. Bigger community does not always mean better results.

Just look at !"

2026-01-31

Phát triển app escrow "bảo mật đầu tiên" cho freelancer: Aman sử dụng React 19, Node.js, PostgreSQL với Drizzle ORM. Đang tập trung vào tính toàn vẹn giao dịch với createEscrow atomic. Cần phản hồi về kỹ thuật transaction trong Drizzle. #SideProject #Freelancer #Security #EscrowApp #NodeJS #React #TypeScript #PostgreSQL #Aman #Dev #BảoMật #FreelancerVietnam #AppVietnam

reddit.com/r/SideProject/comme

Client Info

Server: https://mastodon.social
Version: 2025.07
Repository: https://github.com/cyevgeniy/lmst