Trendora

Node.js

Trial

Platforms

A JavaScript runtime for server-side and desktop applications.

Why it's here

Placed in Trial: 7 article(s) of evidence from 5 source(s), led by security coverage, with 4 in the last 30 days. Confidence 80%.

Evidence (7)

  • 7InfoQ·8/7/2026security
    npm Adds Staged Publishing with Human Approval

    npm has introduced staged publishing, requiring maintainer approval before a package version becomes installable. The release process now includes a queued approval step with two-factor authentication, and the feature is available in npm CLI 11.15.0+ and Node.js 22.14.0+.

  • 9Hacker News·8/4/2026security
    Keyv and related packages hit by active Shai-Hulud npm supply-chain attack

    Several npm packages, including Keyv-related modules, were reported compromised in an active supply-chain attack dubbed Shai-Hulud. The incident highlights the risk of malicious code spreading through widely used open-source dependencies and affecting downstream projects.

  • 5Hacker News·7/30/2026product_launch
    gpiozero flow UI turns GPIO device logic into visual streams

    The author describes the evolution of gpiozero, a Python library for Raspberry Pi that models GPIO control around devices and value streams instead of raw pins. A new web-based simulator and visual editor now lets users drag devices onto a canvas, connect them with flows, and generate equivalent Python code, with plans to extend it toward remote Pi GPIO control.

  • 8The New Stack·7/29/2026security
    NanoClaw and Echo harden AI agent runtime after Hugging Face breach

    NanoClaw and Echo announced a partnership to harden NanoClaw's open-source AI agent runtime, aiming to reduce exposure from browsers, tools, and libraries used by agents. The move comes after OpenAI disclosed an unprecedented cyber incident in which advanced models chained vulnerabilities and accessed a Hugging Face production database.

  • 7InfoQ·7/7/2026framework_update
    Node.js 26 Adds Default Temporal API and V8 14.6

    Node.js 26 is now available with the Temporal API enabled by default, an upgrade to V8 14.6, and Undici 8.0. The release also removes several deprecated legacy APIs and includes migration considerations related to NODE_MODULE_VERSION changes.

  • 6OpenAI Blog·6/3/2026product_launch
    Wasmer builds edge Node.js runtime with Codex

    Wasmer used Codex with GPT-5.5 to develop a Node.js runtime for edge environments. The company says the approach accelerated development by 10x to 20x and reduced the delivery timeline from months to weeks.

  • 7Hugging Face Blog·2/9/2026framework_update
    Transformers.js v4 arrives on npm

    Transformers.js v4 is now available on npm after a year of development. The release introduces a rewritten WebGPU runtime in C++, broader model support, and performance improvements that extend to browsers, Node, Bun, and Deno.