Node.js

GitHub Actions has removed Node 20 from runners. Learn what action maintainers, workflow users, and self-hosted runner operators need to check.

A massive npm supply chain attack compromised TanStack, Mistral AI’s client library, and over 170 packages.

Deno 2.3 brings workspace support and improved Node compatibility.

As we enter 2026, the JavaScript runtime ecosystem is more competitive and innovative than ever. Here’s where things stand.

Deno 2.5 brings improved Node.js compatibility and workspace support, signaling that the JavaScript runtime competition is driving real innovation.

Another wave of malicious npm packages reminds us that JavaScript’s dependency ecosystem remains one of software’s biggest security challenges.

With Bun 1.0 maturing, Deno pushing Node compatibility, and Node.js evolving faster than ever, the JavaScript runtime landscape is more interesting than it’s

Node.js 21 lands with a built-in WebSocket client, V8 11.8, and continued efforts to align the runtime with web platform standards.

Node.js 20 brings a stable built-in test runner and an experimental permission model — two features that signal a maturing runtime taking security and

Node.js 20 arrives with an experimental permission model, a stable test runner, and continued signs that the runtime is prioritizing security and developer

Bun, a new JavaScript runtime built on JavaScriptCore and written in Zig, is making waves with extraordinary benchmark numbers.

TypeScript 4.7 ships with proper ES module support for Node.js, resolving one of the ecosystem’s most painful interoperability headaches.