|
By Estefany Aguilar
Updating Node.js can be as simple as installing a new version. But a safe Node.js upgrade is more than changing the number returned by node -v. A major release can affect dependencies, native addons, Node.js APIs, OpenSSL, build environments, and runtime behavior. Before changing the runtime, the first question should be.
|
By Estefany Aguilar
When npm announced that version 12 would require developers to explicitly approve install scripts, the reaction across the community was almost universally positive. For years, security researchers had warned that package installation had become one of the weakest links in the JavaScript supply chain. Every npm install represented an opportunity for third-party code to execute automatically, often before developers had even looked at the source they were downloading.
|
By Adrián Estrada
TL;DR: When AI-assisted development moved from autocomplete to agentic workflows, the bottleneck for our engineering velocity stopped being the model and started being the vendor. Owning our own orchestration layer, running the same upstream agent stack across multiple developer surfaces, wrapping every change in a version-controlled spec, and treating the agent calls themselves as first-class telemetry is what made spec-driven development practical for us at NodeSource.
|
By Estefany Aguilar
Node.js 24 is the latest Long-Term Support release, and Node.js 26 is the Current release line. Node.js 18 and Node.js 20, meanwhile, have both reached End-of-Life (EOL). That should make the direction of travel obvious. Instead, Matteo Collina’s analysis of Node.js download data showed that even discontinued Node.js 12, 14, and 16 release lines were still generating tens of millions of downloads per month, highlighting how slowly the ecosystem moves away from unsupported versions.
|
By Estefany Aguilar
For years, the Node.js community has typed the same command billions of times: It's probably the most frequently executed command in the JavaScript ecosystem. We use it to start new projects, add dependencies, update existing ones, or simply bootstrap a development environment. It has become such a routine part of our workflow that most of us no longer stop to think about what actually happens during those few seconds while npm fills node_modules.
|
By Estefany Aguilar
A Node.js application can continue starting, accepting traffic, and passing health checks long after the runtime underneath it has become unsupported. That creates a dangerous assumption: In reality, “running” and “supported” are two very different states. A Node.js release is more than a JavaScript executable.
|
By Estefany Aguilar
The N|Solid Extension and open-source N|Solid Plugin bring real Node.js runtime context into code editors and AI coding agents, helping developers investigate production issues, improve performance, and validate changes without breaking their workflow.
|
By Estefany Aguilar
If you've ever updated a dependency, scanned your project for vulnerabilities, or opened a GitHub Security Advisory, you've probably seen something like CVE-2025-13465. For many developers, it's just another identifier attached to a security warning. Easy to ignore, especially when your priority is simply getting your application shipped. But that small reference represents something much bigger: it's the common language the software industry uses to identify and communicate security vulnerabilities.
|
By NodeSource
Reaching a milestone is always exciting. Some milestones carry a deeper meaning. Today, we're proud to share that the N|Solid Runtime has surpassed 2 million downloads. The milestone reflects growing momentum, with downloads accelerating and putting us on track to nearly double last year's total. To us, this isn't simply a download count.
|
By NodeSource
AI coding agents have quickly become part of the daily workflow for Node.js developers. Whether you're using Claude Code, Codex CLI, OpenCode, Antigravity CLI, or Pi Agent, these tools are great at generating code, explaining implementations, and automating development tasks. But debugging production systems is a different challenge.
|
By NodeSource
If you are installing Node.js in Linux to use it in production, there is a big chance that you are using NodeSource Node.js Binary Distributions. In this talk you can find the process in which NodeSource Node.js Binary Distributions is updated, how new versions are supported, the human and infrastructure process, and some limitations of maintaining the channel. Also and most importantly, how the community can get involved with this project.
|
By NodeSource
Node.js v14 has just been released. It comes with exciting features and enhancements. More importantly, it will be promoted to Long-Term Support (LTS) in October. The time to start trying said features and start testing your applications and secure a smooth transition is now. In this talk we will be showing the most relevant of these new features implementation examples and more.
|
By NodeSource
NodeSource’s Enterprise Node.js (NSolid), combines the performance and open-source ecosystem of Node, with the first secure, end-to-end solution for scaled production diagnostics and monitoring that doesn’t incur latency overhead.
|
By NodeSource
NodeSource developed a GitHub Action that can be used as a lightweight CI workflow. Whenever a PR is submitted, NodeSource's 'Node Certified Modules' (NCM) uses the NCM pipeline to check and evaluate the project. The PR then fails or passes depending on the project’s risk profile. The integration delivers detailed code annotations to reflect where certain risk factors occurred in your project.
|
By NodeSource
Amazon Web Services, the “Powered by AWS” logo, and AWS Lambda are trademarks of Amazon.com, Inc. or its affiliates in the United States and/or other countries.
|
By NodeSource
Amazon Web Services, the “Powered by AWS” logo, and AWS Lambda are trademarks of Amazon.com, Inc. or its affiliates in the United States and/or other countries.
|
By NodeSource
Heap snapshots are one of the first steps to take when debugging Node.js applications with poor performance. N|Solid can help by automatically triggering heap snapshots of your Node.js applications and services in production, when they're under real-world load.
|
By NodeSource
Node.js's popularity can be attributed to its ease of adoption with JavaScript developers, a lightweight and performant core, and suitability for applications across platforms. In this guide, we will look specifically at six Node.js web frameworks.
|
By NodeSource
Analysts Jeffrey Hammond, Diego Lo Giudice, and Christopher Condo explain in this Forrester report why digital and software development leaders should take a customer-focused approach to software development to support digital transformation. Organizations often think of modernization in terms of technology choices-and as NodeSource has seen firsthand, Node.js is a key part of the tool set for application modernization. However, this report indicates that most IT organizations don't have the right operational models to develop and deliver great digital experiences.
|
By NodeSource
Analysts Jeffrey S. Hammond and John R. Rymer explain in this Forrester report how serverless - a set of cloud services, programming patterns, business models, and design ideas - enables new levels of flexibility in software through applications that respond to events.
|
By NodeSource
While startups rarely enjoy the resources of a large organization, they usually enjoy a comparative "easy-mode" when it comes to technology adoption. Once a company has reached a certain size, or has existed for long enough, technical debt builds up, organizational ossification sets in, and bureaucratic creep becomes pervasive. This white paper covers our findings from over the last four years of engaging deeply with our enterprise customers: advising, training, and supporting them with our products and expertise through their Node.js adoption journeys.
|
By NodeSource
You've written the next great application, in Node-and you're ready to unleash it upon the world! Which means you can no longer run it on your laptop, you're going to actually have to put it up on some server somewhere and connect it to the real Internet. There has probably never been a better or easier time to learn basic Linux system administration. This tutorial will take you through the steps to deploy and run your application on a Linux server using systemd, which is the replacement to init and upstart in older Linux systems.
|
By NodeSource
PayPal, Netflix, and Walmart show the way to achieve rapid digital transformation of legacy systems. Modernizing systems and processes has become a top priority for businesses across all verticals. Organizations are looking for the fastest and most effective route to modernization; Node.js is emerging as the de facto choice for companies looking to build the apps and other infrastructure needed to make such a move.
- August 2026 (5)
- July 2026 (5)
- June 2026 (4)
- May 2026 (3)
- April 2026 (5)
- March 2026 (3)
- February 2026 (6)
- January 2026 (2)
- November 2025 (1)
- October 2025 (7)
- September 2025 (2)
- August 2025 (2)
- July 2025 (3)
- June 2025 (2)
- May 2025 (4)
- April 2025 (3)
- March 2025 (2)
- February 2025 (3)
- January 2025 (3)
- December 2024 (5)
- November 2024 (1)
- August 2024 (1)
- June 2024 (1)
- April 2024 (1)
- March 2024 (2)
- February 2024 (2)
- December 2023 (1)
- November 2023 (2)
- October 2023 (2)
- August 2023 (2)
- July 2023 (2)
- June 2023 (2)
- May 2023 (1)
- April 2023 (3)
- March 2023 (1)
- February 2023 (2)
- January 2023 (4)
- December 2022 (1)
- October 2022 (4)
- September 2022 (2)
- August 2022 (3)
- July 2022 (7)
- June 2022 (2)
- May 2022 (2)
- April 2022 (1)
- March 2022 (3)
- February 2022 (4)
- January 2022 (3)
- December 2021 (2)
- November 2021 (2)
- October 2021 (1)
- September 2021 (1)
- August 2021 (4)
- July 2021 (3)
- May 2021 (1)
- March 2021 (2)
- February 2021 (3)
- January 2021 (1)
- December 2020 (3)
- November 2020 (2)
- October 2020 (1)
- September 2020 (6)
- August 2020 (2)
- July 2020 (1)
- June 2020 (2)
- May 2020 (5)
- April 2020 (5)
- August 2019 (1)
- July 2019 (4)
- August 2017 (2)
- February 2017 (1)
- October 2016 (2)
- October 2015 (4)
NodeSource empowers organizations to successfully design, build, and manage Node.js applications and compete in the modern digital era.
The NodeSource product suite is built around the N|Solid runtime, a drop-in replacement for the Node.js runtime that offers low-impact performance monitoring and enhanced security. Alone or alongside our Professional Services and Support offerings, the NodeSource platform helps to mitigate security risk and provide deep operational visibility into mission-critical applications.
The N|Solid platform delivers enhanced security and unparalleled visibility into application performance and health. Customizable security policies and real-time vulnerability scanning of third-party JavaScript modules running in production help protect code against malicious attacks. Detailed application metrics help teams identify issues sooner, reduce time to resolution, deliver peak performance, and keep infrastructure costs under control.
Why N|Solid?
- Faster Time to Resolution: The most advanced Node.js monitoring and diagnostic tools to help identify and tackle tricky issues.
- Stronger Infrastructure: Deep performance insights help you build highly reliable applications and minimize infrastructure costs.
- Hardened Security: Mitigate unseen security risks with custom security policies and real-time vulnerability scanning.