Node.js
TrialPlatforms
A JavaScript runtime for server-side and desktop applications.
Why it's here
Placed in Trial: 7 article(s) of evidence from 5 source(s), led by security coverage, with 4 in the last 30 days. Confidence 80%.
Evidence (7)
- 7InfoQ·8/7/2026securitynpm Adds Staged Publishing with Human Approval
npm has introduced staged publishing, requiring maintainer approval before a package version becomes installable. The release process now includes a queued approval step with two-factor authentication, and the feature is available in npm CLI 11.15.0+ and Node.js 22.14.0+.
- 9Hacker News·8/4/2026securityKeyv and related packages hit by active Shai-Hulud npm supply-chain attack
Several npm packages, including Keyv-related modules, were reported compromised in an active supply-chain attack dubbed Shai-Hulud. The incident highlights the risk of malicious code spreading through widely used open-source dependencies and affecting downstream projects.
- 5Hacker News·7/30/2026product_launchgpiozero flow UI turns GPIO device logic into visual streams
The author describes the evolution of gpiozero, a Python library for Raspberry Pi that models GPIO control around devices and value streams instead of raw pins. A new web-based simulator and visual editor now lets users drag devices onto a canvas, connect them with flows, and generate equivalent Python code, with plans to extend it toward remote Pi GPIO control.
- 8The New Stack·7/29/2026securityNanoClaw and Echo harden AI agent runtime after Hugging Face breach
NanoClaw and Echo announced a partnership to harden NanoClaw's open-source AI agent runtime, aiming to reduce exposure from browsers, tools, and libraries used by agents. The move comes after OpenAI disclosed an unprecedented cyber incident in which advanced models chained vulnerabilities and accessed a Hugging Face production database.
- 7InfoQ·7/7/2026framework_updateNode.js 26 Adds Default Temporal API and V8 14.6
Node.js 26 is now available with the Temporal API enabled by default, an upgrade to V8 14.6, and Undici 8.0. The release also removes several deprecated legacy APIs and includes migration considerations related to NODE_MODULE_VERSION changes.
- 6OpenAI Blog·6/3/2026product_launchWasmer builds edge Node.js runtime with Codex
Wasmer used Codex with GPT-5.5 to develop a Node.js runtime for edge environments. The company says the approach accelerated development by 10x to 20x and reduced the delivery timeline from months to weeks.
- 7Hugging Face Blog·2/9/2026framework_updateTransformers.js v4 arrives on npm
Transformers.js v4 is now available on npm after a year of development. The release introduces a rewritten WebGPU runtime in C++, broader model support, and performance improvements that extend to browsers, Node, Bun, and Deno.