On April 9th Francesco Soncina –also known as phra on the HackerOne security bug bounty platform– reported a Server-side JavaScript code injection vulnerability... (more…)

This is a story of a bug I had an opportunity to fix in the ancient times of node.js 0.10. The new and shiny node.js 0.12 was still just glimmering somewhere on the horizon, we were still young and beautiful. Some of us, at least.

tl;dr: If you are running an application in production mode now or in the near future, use the LTS version of Node.js, otherwise the current version. To install multiple versions in parallel, use a version manager such as nvm. (more…)

RunKit notebooks are interactive javascript playgrounds connected to a complete node environment right in your browser. Every npm module pre-installed.

Hi, node-uuid author here. I just had this module brought to my attention and thought we might compare notes. I haven't done a thorough investigation, but it seems like cuid is pretty similar t... (more…)