Node v23.2 released

Introducing the vlt Package Manager — Made up of an incredibly experienced team, including npm’s creator Isaac Schlueter, Vlt set out to ‘build the future’ of JS package management. The vlt tool, explained here, is the first fruit of the project and acts as ‘a drop-in replacement’ to whatever you’re using now.

Vlt

Key Learnings From the State of DevSecOps Study — To understand the state of DevSecOps adoption in 2024, Datadog evaluated real-world data from thousands of applications. Read the report for key insights on secure application development techniques to improve your security posture.

Datadog

Node.js v22 Enters Long Term Support (LTS) — This happened in the past couple of weeks, but Lizz has put together a useful update on Node 22’s recent transition to becoming an LTS release and the key features it has baked in.

Lizz Parody (NodeSource)

Node Implementing Stricter Policies for Pull Requests — To help bolster the stability and security of major releases, the Node team has introduced a stricter policy around semver-major PRs. If such a PR lands on the default branch within a month prior to a major release, it’ll be far less likely to make it in.

Sarah Gooding

WebAssembly Audio Decoders — Targeting both browser and Node.js use cases, this is a collection of WASM-powered audio decoding libraries for formats like MPEG I/II/III, FLAC, Ogg Opus, Ogg FLAC, Opus, and Ogg Vorbis.

Ethan Halsall