Lightnews — Scholar-powered news

Express @expressjs.bsky.social · Sep 8

For updates from the maintainer: github.com/debug-js/deb...

Version 4.4.2 published to npm is compromised · Issue #1005 · debug-js/debug

MESSAGE FROM @Qix- : PLEASE SEE #1005 (comment) FOR LATEST UPDATES. Version not present in this repo has been pushed out to npm. https://www.npmjs.com/package/debug/v/4.4.2?activeTab=code src/index...

github.com

Express @expressjs.bsky.social · Sep 8

The maintainer of one of our dependencies, debug, was the target of a phishing attack resulting in the release of [email protected] with malware.

Supply chain security is all of our responsibilities. Be careful out there, and for today don't update your deps.

socket.dev/blog/npm-aut...

npm Author Qix Compromised via Phishing Email in Major Suppl...

npm author Qix’s account was compromised, with malicious versions of popular packages like chalk-template, color-convert, and strip-ansi published.

socket.dev

1 5 12

Reposted by Express

Ulises Gascón @ulisesgascon.com · May 19

🔐 Is it a vulnerability, or just a misunderstood feature?

At #NodeCongress2025, I broke it down in my talk: "What is a Vulnerability and What’s Not"

Topics:
👉 Real vs. imagined risks in @nodejs.org and @expressjs.bsky.social
👉 Why #threatModels matter

🎥 Watch: gitnation.com/contents/wha...

What is a Vulnerability and What’s Not? Making Sense of Node.js and Express Threat Models by Ulises Gascón

In this talk, we will discuss security, vulnerabilities, and how to improve your overall security. We will explore various vulnerabilities and the difference between developer errors and misconfigurat...

gitnation.com

1 3

Reposted by Express

Sebastian Beltran @bjohansebas.bsky.social · Jul 17

I’ve been maintaining @expressjs.bsky.social for over 11 months. I’m currently leading the integration of HTTP/2, as well as helping with the documentation redesign and performance improvements. If my work has helped you, consider supporting my open source work:

dub.sh/bjohansebas

Sponsor @bjohansebas on GitHub Sponsors

Support bjohansebas's open source work

dub.sh

1 4

Reposted by Express

Ulises Gascón @ulisesgascon.com · Jul 31

😏 The Great Monkey-Patch Safari in @expressjs.bsky.social has begun. Join the adventure with critical hacks and hotfixes ahead!

github.com/expressjs/ex...

The Great Monkey-Patch Safari · Issue #6669 · expressjs/express

We want to track down and document all instances of express and our core deps monkey-patching Node core, specifically it's the HTTP internals like IncomingMessage and ServerResponse where we do our...

github.com

1 2 2

Reposted by Express

Yagiz Nizipli @yagiznizipli.com · Aug 1

Say hello to my very old friend @expressjs.bsky.social running on @cloudflare.social workers!

2 1 15

Reposted by Express

Sebastian Beltran @bjohansebas.bsky.social · Aug 3

Hi Express community!

We’d love your feedback on our website’s content.

✨ What topics or resources would you like us to add?
🔧 What existing content do you think we could improve?

Your input will help us make our docs even better, every idea matters!

github.com/expressjs/ex...

🧑‍🍳 Ideas for new guides or improvements to existing content · expressjs expressjs.com · Discussion #2029

Hey folks, the Express team wants to know what content you’d like to see in the documentation — for example, topics for new guides at any level, or what content could be updated in the existing gui...

github.com

2 5

Reposted by Express

Ulises Gascón @ulisesgascon.com · May 14

We’ve cleaned up @expressjs.bsky.social ! 🧹

Deprecated some legacy packages:
🔥 csurf
🔥 connect-multiparty
🔥 path-match

More context: github.com/expressjs/di...

Blog post coming soon! 📘

Clean up expressjs org · Issue #134 · expressjs/discussions

So while responding to #71 I also realized that there is something on the TC backlog that ideally should get done at some point: go through the repositories in the expressjs org (https://github.com...

github.com

2 4 21

Express @expressjs.bsky.social · May 14

We had a great meeting, discussed some of our goals and next steps. You can see some notes here: github.com/expressjs/pe...

We will post the recording to our YouTube when it is ready.

2025-05-14 Express Performance Working Group Meeting · Issue #8 · expressjs/perf-wg

Date/Time Timezone Date/Time America/Los_Angeles Wed 14-May-2025 08:00 (08:00 AM) America/Denver Wed 14-May-2025 09:00 (09:00 AM) America/Chicago Wed 14-May-2025 10:00 (10:00 AM) America/New_York W...

github.com

1 3

Express @expressjs.bsky.social · May 14

Happening now!

Wes @notwes.bsky.social · May 13

Tomorrow we are going to have a first informal @expressjs.bsky.social Performance Working Group meeting.

If you are interested in this work, especially longer term, please come and chat. Since it was last minute we are not having an agenda, just an informal discussion.

github.com/expressjs/pe...

2025-05-14 Express Performance Working Group Meeting · Issue #8 · expressjs/perf-wg

Date/Time Timezone Date/Time America/Los_Angeles Wed 14-May-2025 08:00 (08:00 AM) America/Denver Wed 14-May-2025 09:00 (09:00 AM) America/Chicago Wed 14-May-2025 10:00 (10:00 AM) America/New_York W...

github.com

1 1

Reposted by Express

Ulises Gascón @ulisesgascon.com · Apr 30

🥹 May is almost here, and it's officially #MaintainerMonth 🚀

I’ve helped release @expressjs.bsky.social 5.1, ship key @nodejs.org updates, lead #OpenSource security work, and reboot #Yeoman.

If you believe in supporting #devTools, consider sponsoring ❤️

👉 github.com/sponsors/Uli...

Ulises Gascón is showing off a custom-built futuristic robot during a livestream, combining his passion for open source and robotics in a fun and hands-on way.

2 9

Reposted by Express

Sebastian Beltran @bjohansebas.bsky.social · May 11

@expressjs.bsky.social has officially surpassed 40 million weekly downloads on npm⚡

1 7

Reposted by Express

Wes @notwes.bsky.social · May 13

Tomorrow we are going to have a first informal @expressjs.bsky.social Performance Working Group meeting.

If you are interested in this work, especially longer term, please come and chat. Since it was last minute we are not having an agenda, just an informal discussion.

github.com/expressjs/pe...

2025-05-14 Express Performance Working Group Meeting · Issue #8 · expressjs/perf-wg

Date/Time Timezone Date/Time America/Los_Angeles Wed 14-May-2025 08:00 (08:00 AM) America/Denver Wed 14-May-2025 09:00 (09:00 AM) America/Chicago Wed 14-May-2025 10:00 (10:00 AM) America/New_York W...

github.com

2 6

Reposted by Express

Wes @notwes.bsky.social · Apr 22

Finally getting around to the Performance WG setup for @expressjs.bsky.social. Anyone who is interested, please feel free to start opening issues and participating in the kickoff.

github.com/expressjs/pe...

Working Group Charter · Issue #3 · expressjs/perf-wg

We need to outline the goals, scope, and membership guide. I can pull from the other WG's for some of the language, but we need to define the goals for the WG for sure. Here are the things I was th...

github.com

2 7

Reposted by Express

Sebastian Beltran @bjohansebas.bsky.social · Apr 6

When I started contributing to the @expressjs.bsky.social site, there were barely any PRs for docs or design.

Today, even though there’s still a lot to improve on the design side, we’ve got a great contributor base, similar to when the site’s development was sponsored by a company back in 2015

1 1 6

Express @expressjs.bsky.social · Mar 31

🚀 Exciting Announcement today!

Express v5 is officially "latest" and we have started the maintenance period for v4. Read more about the release and our LTS plans in our blog post: expressjs.com/2025/03/31/v...

[email protected]: Now the Default on npm with LTS Timeline

Express 5.1.0 is now the default on npm, and we're introducing an official LTS schedule for the v4 and v5 release lines.

expressjs.com

2 9 45

Reposted by Express

Wes @notwes.bsky.social · Mar 29

Also hoping to call this out in our blog post. Got great reviews (thanks @naugtur.pl 🚀) by posting here yesterday, hope maybe the same will work for the blog post. Reviews welcome!

github.com/expressjs/ex...

2 3 9

Reposted by Express

Wes @notwes.bsky.social · Mar 28

If you have a chance, please take a look at this PR which proposes some concrete details and dates.

github.com/expressjs/di...

feat(ADR): LTS Strategy by wesleytodd · Pull Request #352 · expressjs/discussions

A proposal for an LTS strategy with committed dates and next steps. Please see the goals/non-goals for this ADR. I attempted to copy/paste without edits from all the sources we had. I admit there w...

github.com

1 1 3

Reposted by Express

Wes @notwes.bsky.social · Mar 28

With the upcoming release of @expressjs.bsky.social v5 and promoting it to latest on npm, we needed to finalize some of our support and schedule plans. Would love feedback on this plan from the ecosystem so we can do better than we have in the past on keeping folks informed and aware of the plans.

1 3 5

Reposted by Express

Wes @notwes.bsky.social · Mar 27

I want to especially thank @bjohansebas.bsky.social for all his work these past months! Not only is a lot of his work in these releases, he has also become our top contributor across the @expressjs.bsky.social project.

expressjs.github.io/statusboard/

1 6

Reposted by Express

Ulises Gascón @ulisesgascon.com · Mar 27

🚀 Just released [email protected] 📦

🍿 #release details: github.com/expressjs/bo...

Release v2.2.0 · expressjs/body-parser

What's Changed test: remove --bail from test script by @Phillip9587 in #583 ci: separate lint step by @Phillip9587 in #582 fix: remove skip of test by @bjohansebas in #589 ci: use lcovonly reporte...

github.com

2 7

Reposted by Express

Ulises Gascón @ulisesgascon.com · Mar 27

🚀 Just released [email protected] 📦

🍿 #release details: github.com/jshttp/type-...

Release 2.0.1 · jshttp/type-is

What's Changed Refactor normalizeType function to simplify return statement by @Ayoub-Mabrouk in #61 Refactor tryNormalizeType function for cleaner code by @Ayoub-Mabrouk in #59 Replace deprecated...

github.com

2 4

Reposted by Express

Ulises Gascón @ulisesgascon.com · Mar 27

🚀 Just released [email protected] 📦

🍿 #release details: github.com/pillarjs/rou...

Release v2.2.0 · pillarjs/router

What's Changed docs: remove security file by @bjohansebas in #152 fix: restore 'debug' logs by @dpopp07 in #151 chore: upgrade scorecard workflow pinned action versions by @carpasse in #150 cleanu...

github.com

2 3

Reposted by Express

Ulises Gascón @ulisesgascon.com · Mar 26

🚀 Just released [email protected] 📦

🍿 #release details: github.com/jshttp/mime-...

Release v3.0.1 · jshttp/mime-types

What's Changed chore: upgrade scorecard workflow pinned action versions by @carpasse in #130 fix: update mime-db dependency to version 1.54.0 by @bjohansebas in #133 Release 3.0.1 by @UlisesGascon...

github.com

2 2

Reposted by Express

Sebastian Beltran @bjohansebas.bsky.social · Mar 11

For over 6 months, I've been supporting the @expressjs.bsky.social project, improving documentation and maintaining packages like compression. If my contributions have been helpful, it would be great if you could support me:

github.com/sponsors/bjo...

#OpenSource

Sponsor @bjohansebas on GitHub Sponsors

Support bjohansebas's open source work

github.com

1 4