Lightnews — Scholar-powered news

Nominate @bjohansebas to the Security Triage team by UlisesGascon · Pull Request #105 · expressjs/security-wg

Reposted by Sebastian Beltran

Ulises Gascón @ulisesgascon.com · 25d

Welcome @bjohansebas.bsky.social to the @expressjs.bsky.social Security Triage team! 👏 👏 👏

github.com/expressjs/se...

I’d like to nominate @bjohansebas as a Security Triage Team member, based on his contributions across multiple project areas and his recent involvement in CVE-2025-48997. cc: @expressjs/express-tc ...

http: add optimizeEmptyRequests option for IncomingMessage._dump by RafaelGSS · Pull Request #59778 · nodejs/node

2 5

Sebastian Beltran @bjohansebas.bsky.social · 28d

lol, on-finished blocking Node.js, how weird is that

github.com/nodejs/node/...

Backportable version of #59747 cc: @ronag

Release v3.0.1 · stream-utils/raw-body

Sebastian Beltran @bjohansebas.bsky.social · Sep 4

raw-body 3.0.1 released

- Includes the iconv-lite update.
- Updates the engines field to reflect Node.js support as >=0.10.
(The package didn’t work on Node 0.8, and this has now been documented.)

github.com/stream-utils...

What's Changed ci: fix ci errors by @bjohansebas in #98 deps: bump iconv-lite by @bjohansebas in #97 chore: fix engines field by @bjohansebas in #99 release: 3.0.1 by @bjohansebas in #100 New Con...

docs: add @bjohansebas to security team by bjohansebas · Pull Request #3 · webpack/security-wg

Sebastian Beltran @bjohansebas.bsky.social · Sep 1

Electronic music, while I work on a super long report about circuits, is the best

Sebastian Beltran @bjohansebas.bsky.social · Aug 31

I’m joining the webpack security group :)

github.com/webpack/secu...

I would like to join this security group. I already have experience with Express in the security group through initiatives aimed at improving both the public-facing aspects and internal processes. ...

Release v0.7.0 · pillarjs/iconv-lite

3

Sebastian Beltran @bjohansebas.bsky.social · Aug 30

Murphy's Law

Sebastian Beltran @bjohansebas.bsky.social · Aug 23

Open source, a place where you need to have patience, and now even more so with AI creating issues

Sebastian Beltran @bjohansebas.bsky.social · Aug 20

New version of iconv-lite 0.7.0, with changes that include:

- Handle split surrogate pairs when encoding UTF-8
- Avoid false positives in encodingExists by using objects without a prototype
- Make explicit that the decode() method supports Uint8Array input

github.com/pillarjs/ico...

🐞 Bug fixes Handle split surrogate pairs when encoding utf8 - by @yosion-p and @ashtuchkin in #282: Handle a case where streaming utf8 encoder (converting js strings -> buffers) encounters surrog...

release: 0.7.0 by bjohansebas · Pull Request #334 · pillarjs/iconv-lite

Sebastian Beltran @bjohansebas.bsky.social · Aug 19

I have to say that I’ve dedicated a lot of time to achieving this, but it was time well spent

1 1

Sebastian Beltran @bjohansebas.bsky.social · Aug 19

I’m pleased to announce that iconv-lite is now part of the @expressjs.bsky.social project. Many thanks to Alex Shtuchkin for all these years of helping maintain the package and for allowing it to now have a new home here.

And a release is coming soon 😉

github.com/pillarjs/ico...

I plan to release this version on Wednesday, 8/20/2025 cc: @wesleytodd @ashtuchkin @UlisesGascon I’ll check if we already agree on moving this package to expressjs/pillarjs :) so I can update the m...

release: 0.7.0 by bjohansebas · Pull Request #334 · pillarjs/iconv-lite

Reposted by Sebastian Beltran

Ulises Gascón @ulisesgascon.com · Aug 19

Say hello to the newest member of the @expressjs.bsky.social family 👋

iconv-lite: Convert character encodings in pure #javascript.

And yes… a new release is baking in the oven 🔥

github.com/pillarjs/ico...

I plan to release this version on Wednesday, 8/20/2025 cc: @wesleytodd @ashtuchkin @UlisesGascon I’ll check if we already agree on moving this package to expressjs/pillarjs :) so I can update the m...

GitHub - pillarjs/iconv-lite: Convert character encodings in pure javascript.

1 2

Reposted by Sebastian Beltran

Wes @notwes.bsky.social · Aug 19

The @expressjs.bsky.social project has helped transfer over iconv-lite (with the awesome effort of @bjohansebas.bsky.social). Hopefully we can be a good home for this package which adds another 446M monthly downloads to the projects scope.

github.com/pillarjs/ico...

Convert character encodings in pure javascript. Contribute to pillarjs/iconv-lite development by creating an account on GitHub.

1 2 7

Sebastian Beltran @bjohansebas.bsky.social · Aug 6

After spending almost a whole day figuring out how to remove monkey-patching, and also improve Express' performance, I think I found a clean solution, especially after studying Fastify's core.

3

Sebastian Beltran @bjohansebas.bsky.social · Aug 5

yes!

🧑‍🍳 Ideas for new guides or improvements to existing content · expressjs expressjs.com · Discussion #2029

Sebastian Beltran @bjohansebas.bsky.social · Aug 3

Hi Express community!

We’d love your feedback on our website’s content.

✨ What topics or resources would you like us to add?
🔧 What existing content do you think we could improve?

Your input will help us make our docs even better, every idea matters!

github.com/expressjs/ex...

Hey folks, the Express team wants to know what content you’d like to see in the documentation — for example, topics for new guides at any level, or what content could be updated in the existing gui...

2 5

Sebastian Beltran @bjohansebas.bsky.social · Jul 31

The best hotfix would be to fix it directly in Node.js 🫣

Avoid using monkey-patching and look for a long-term solution · Issue #127 · nodejs/web-server-frameworks

Sebastian Beltran @bjohansebas.bsky.social · Jul 31

Join this discussion on how to stop doing monkey-patching and achieve a solution in Node.js core to address several current issues in the Express ecosystem and very likely other web server framework ecosystems as well.

github.com/nodejs/web-s...

Problem The current problem lies in the fact that several packages maintained by Express have to perform monkey-patching on properties (especially of OutgoingMessage) in order to work. For example,...

lib: docs deprecate _http_* by bjohansebas · Pull Request #59293 · nodejs/node

Sebastian Beltran @bjohansebas.bsky.social · Jul 31

A small but huge step at the same time, to enable a runtime deprecation for the _http_* modules in Node.js 26 that should be internal to Node and not exposed

github.com/nodejs/node/...

It seems that the plan is to start with a documentation deprecation, in order to remove these modules and rely solely on internals. Ref #58535

Sebastian Beltran @bjohansebas.bsky.social · Jul 31

People should read the migration guides when moving from one version to another. Those guides were made for a reason, not for people to do weird things when the new way of doing it has already been documented

Sebastian Beltran @bjohansebas.bsky.social · Jul 28

now that i'm adding a feature to express's router, i think it would be a good idea to write a blog post explaining how it works under the hood.

Sebastian Beltran @bjohansebas.bsky.social · Jul 26

yes!

Sebastian Beltran @bjohansebas.bsky.social · Jul 26

copilot probably only serves to check the spelling in the PR, haha