Playing in the sandbox
#476 — March 2, 2023
zx 7.2: A Tool for Writing Better Shell Scripts — Always a popular tool when we link it! zx is an alternative way to run Node that makes it more useful for shell scripting by bringing along a variety of niceties like process management, argument handling, and including useful packages like Chalk for text coloring. v7.2 adds retry and spinner helpers (for retrying callbacks and showing a spinner UI element, respectively).
Node.js Toolbox: A New Way to Find Node.js Packages — If you’ve worked in the Ruby/Rails space, you might know Ruby Toolbox as a long-time way to find and compare libraries. It’s early days but Node.js Toolbox is an unrelated, but similar effort curating Node packages in areas like HTTP frameworks, browser testing and query builders.
Memetria: Secure, Scalable, Full-Featured Redis 7 Hosting — The latest Redis features, instrumented and scaled with the tools teams need as they grow.
Sandbox Security Concerns with Node’s vm Module — node:vm lets you compile and run code within separate contexts of the underlying V8 engine. Great for sandboxing, right? Not so fast. Even the docs say it’s not for running untrusted code. Liran looks at the implications.
Yet again, npm supply chain security issues have reared their head with a supposed flood of 15,000 phishing packages on February 20/21.
You can now add pronouns to your GitHub profile.
Strapi is an open source Node.js-based headless CMS but the company behind it has unveiled Strapi Cloud, a commercial option for running it in the cloud.
Experiments in Mitigating Serverless Cold Start Delays — If you’re using Node for serverless functions on Vercel or Netlify, is a ‘cold start’ delay still a thing, and would frequently pinging a function mitigate against it? Due to how Vercel and Netlify specifically work, those pings may not be as useful as you’d suspect..
Bitmovin Handbook – The Definitive Guide to Video Codecs — A quick overview into the history and application of the most used codecs to help you select the ideal codec application.
Bitmovin Inc. sponsor
▶ A Deep Dive into the Node.js Event Loop
🛠 Code & Tools
Remult: A CRUD Framework for Full-Stack TypeScript — Promises a ‘zero-boilerplate’ CRUD API experience by using your TypeScript entities as a single source of truth for your API, frontend type-safe API client and backend ORM. There are tutorials for using it alongside React, Angular, Vue and Next.js.
BullMQ 3.9: Reliable, Redis-Based Distributed Queue for Node — A fast, reliable Redis-based distributed queue for Node with a focus on stability and atomicity.
Need to Upgrade to Node 18? Don’t Have Time? Our Experts Can Help 🚀
A Boilerplate Express.js + MongoDB Node.js App — ‘express-mongodb-rest-api-boilerplate’ doesn’t really roll off the tongue, but there’s a lot baked in here.
Official MongoDB Node.js Driver 5.1 — The official MongoDB driver now supports BigInt values with automatic serialization to BSON longs and vice versa.
↑ eta (η) 2.0.1
↳ Embedded template engine for Node, Deno & browser.
↳ A tool for writing better scripts
↳ Middleware-driven REST API framework.
↳ Convert CSV files to JSON with Node.
↳ Real-time web framework for Node. (Their example of how easily you can spin up a WebSocket system is pretty neat.)
↳ Type-safe Postgres client library.
↳ Alternative, efficient package manager.
Software Engineer (Backend) — Join our “kick ass” team. Our software team operates from 17 countries and we’re always looking for more exceptional engineers.
Find Tech Jobs with Hired — Hired makes job hunting easy-instead of chasing recruiters, companies approach you with salary details up front. Create a free profile now.