Jest has graduated! Jest is a JavaScript testing framework that allows you to write tests with an API with little configuration. They are now an at-large project.

This month's security progress report featured new security releases for Node.js, updates to the permission model, progress on automation of security releases and talks in the community.

We’re happy to welcome three new members on the OpenJS Foundation Board of Directors, and four that were re-elected. They are filling positions on the Gold, Silver and Community level.

On April 24, 2004, Dojo was released and became one of the pioneering JavaScript libraries aimed at simplifying and standardizing web development. Happy 20 years!

The release of Node.js 22 is available now! ​​Highlights in Node.js 22 include require()ing ESM graphs, WebSocket client, updates of the V8 JavaScript engine, and more!

The new Healthy Web Checkup tool is easy to use tool and checks for the latest versions of popular web technology jQuery.

XZ Utils cyberattack likely not an isolated incident

Hear from Hitachi's Kazuhito Yokoi to find out more about Node-RED and why it is becoming so popular in Industrial IoT applications.

WebGPU enablement combines with new community-based features that include improved GPU-based data filtering, more intuitive first-person views, and a new flexible widget system.

New Gold member provides services to secure and support end-of-life open source packages 

Network of experienced technologists provides consulting and delivery services, now a part of the OpenJS Foundation

CarGurus has joined the OpenJS Foundation as a silver member.

Check out what we've been up to in this edition of our Node.js Security Progress Report.

Version 3.0 of kepler.gl is now available, bringing new geospatial features to kepler.gl application users and dramatic improvements to developers using the kepler.gl libraries.

Talk from Marco Ippolito, Senior Developer Experience Engineer, NearForm, at OpenJS World 2023 in Bilbao, Spain, September 19-21, 2023.

OpenJS Foundation and 7ASecurity collaborated on the nvm security audit with the Open Source Technology Improvement Fund (OSTIF) as a result of the latest funding from the Sovereign Tech Fund.

Check out what we've been up to in this edition of our Node.js Security Progress Report.

Talk from Aileen Villanueva Lecuona, Endava, at OpenJS World 2023 in Bilbao, Spain, September 19-21, 2023.

In honor of Cyber Monday, take 65% off Node.js Training and Certification until December 4.

Talk from Tamsil Sajid Amani, Software Engineer at BrowserStack at OpenJS World 2023 in Bilbao, Spain, September 19-21, 2023.

October was busy due to the latest security release affecting Node.js 18 and Node.js 20. Usually, we lock in the Continuous Integration (CI) cycle at least 5 days before a release. This time, however, due to the recent changes to the CITGM (Canary In The Gold Mine: a simple tool for pulling down an arbitrary module from npm and testing it using a specific version of the node runtime) and changes to the automation of the security release proposal, it was just 3 days.

The OpenJS Foundation, working with its community, continues to deliver regular updates to the widely-used jQuery solution. IDC conducted research on the use of jQuery in the U.S., Germany and the U.K., with a total of 509 survey respondents in those three countries representing small, medium and large businesses across 23 distinct industries.

OpenJS Foundation reports poor security practices across industries in North America, UK and Europe.

September was a busy month with participation in 3 different events, regular work on security reports, and discussions around creating an SBOM for Node.js.

The release of Node.js 21 is available now! Node.js 21 replaces Node.js 20 as our current release line, and Node.js 20 is being promoted to long-term support (LTS). 

The Wikimedia Foundation is the non-profit that hosts Wikipedia and other free knowledge and open data projects. These projects are made possible by a global community who, together with the Foundation, comprise the “Wikimedia movement”. The Wikimedia movement is united by a vision: to bring about a world in which every single human being can freely share in the sum of all knowledge. We talked with Timo Tijhof, Principal Engineer at the Wikimedia Foundation, to find out how the organization approaches security and performance at scale.

Read our progress report on Node.js security in the month of August.

We’re excited to be at Open Source Summit in Shanghai, China from September 26-28!

In July, we continued our regular work triaging and fixing Node.js security issues