Automatic N-API bindings for any Zig project. Contribute to cztomsik/zig-napigen development by creating an account on GitHub. (more…)

Prototype pollution is a dangerous vulnerability affecting prototype-based languages like JavaScript and the Node.js platform. It refers to the ability of an attacker to inject properties into an object's root prototype at runtime and subsequently trigger... (more…)

Non-blocking I/O sounds like a very fancy term, but it's actually not too bad!Feel free to ask questions in the comments below! (more…)

simdutf provides a faster way of providing utf8 operations with SIMD instructions. @nodejs/undici team was looking for a way to validate utf8 input, and this dependency can make it happen. Edit: I'... (more…)

Today @sehrope found and reported a code execution vulnerability in node-postgres. This affects all versions from pg@2.x through pg@7.1.0. (more…)