I feel there is a tendency to forget that we, or somebody else, will have to maintain our code weeks, months or even years after its… (more…)

The csv-parse module before 4.4.6 for Node.js is vulnerable to Regular Expression Denial of Service. The __isInt() function contains a malformed regular expression that processes large crafted input very slowly. This is triggered when using the cast optio... (more…)

This allows for HTTPS (not HTTP) imports to work with the ESM module loader. This PR is only an initial PR for incremental progress behind a flag. (more…)

Build and deploy Javascript modules to serverless clouds, in a pure functional and composable way. (more…)

A checklist for developing secure apis using the express framework for Node.js. (more…)