You almost certainly use a project supported by the OpenJS Foundation — even if you've never heard of it.
Node.js. Electron. Jest. webpack. ESLint. jQuery. Lodash.
These are just some of the projects that call the OpenJS Foundation home. Together, they are downloaded billions of times each month and power applications across every industry.
The OpenJS Foundation provides these projects and their maintainers with a neutral home, open governance, shared infrastructure, and security support — so they can focus on the work itself rather than the overhead of running major open source projects alone.
Open source software doesn't maintain itself. It depends on people who need support and sustainable conditions to keep doing it.
→ Learn more about our projects: bit.ly/4vMoLC5
⚠️ Security release pre-alert: The Node.js project will release new versions of the 26.x, 24.x, 22.x
releases lines on or shortly after, Wednesday, June 17, 2026 in order to address one or more security issues, the highest severity is HIGH.
Details: nodejs.org/en/blog/vulnerabi…
This is fantastic news for the Node.js ecosystem! 🎉
We're incredibly proud to see our own @kom_256 taking on this role and helping shape the future of AI-assisted security across the ecosystem.
Congratulations to @AlphaOmegaOSS, @openjsf, @nodejs, and everyone involved! 🚀🔒
👇🏼 More details in the comments.
This is fantastic news for the Node.js ecosystem! 🎉
We're incredibly proud to see our own @kom_256 taking on this role and helping shape the future of AI-assisted security across the ecosystem.
Congratulations to @AlphaOmegaOSS, @openjsf, @nodejs, and everyone involved! 🚀🔒
👇🏼 More details in the comments.
I'm excited to share that I'll be speaking at @RenderATL with my friend Brian Muenzenmeyer, talking about Node.js Developer Experience and Communities.
Join me at #renderatl either in-person or virtually this year on August 12-13th :)
Tomorrow. One hour. Two members of the Node.js Technical Steering Committee.
Matteo Collina (TSC Chair) and Marco Ippolito (TSC & HeroDevs Engineer) join HeroDevs' Javier Perez to talk Node 20 EOL, the path to Node 27 LTS, and how the project is handling a flood of AI-generated CVE reports — plus what to do if you can't migrate off Node 20 yet.
Live Q&A included.
📅 May 27, 2026 | 11:00 AM EST | Free registration
Register → herodevs.com/from-node-20-eo…#NodeJS#OpenSource#EndOfLife#DevSecOps#JavaScript#HeroDevs
You know what, after years of expensive PCs, the Steam Machine is going to be my next PC for Open Source development, gaming and personal usage. I'm pretty sure I'm going to rock it with CachyOS to get the best of performance.
Another day, another Node.js release 😎
Node.js 24.16.0 is out! A few test runner features, `randomUUIDv7`, plus many more bug fixes and small improvements.
Full changelog and download links: nodejs.org/en/blog/release/v…
Node.js 26.2.0 is out! ✨
`stream.compose` is now stable, `node:fs` integrates with the new `Temporal` API, and a fair load of bug fixes.
Full changelog and download: nodejs.org/en/blog/release/v…
Sending warm hugs to @tan_stack, the moment I read in their postmortem that they were using steps with pull_request_target I immediately knew, their Actions Cache got poisoned.
This is the sort of silly mistake even veterans can easily be targeted, and yet another reason why GitHub should deprecated pull_request_target and improve the default security of GitHub Actions.