Finding vulnerabilities is only part of open source security. Maintainers still need resources to triage, patch, and ship secure releases. The new OpenJS Security Stewardship Program will fund researchers and maintainers, starting with Node.js. hubs.la/Q04ykc4R0

Registration for Node-RED Con 2026 is now open. The programme is set and it's a strong one. November 3rd, free and online. Don't miss it. events.zoom.us/ev/Ag_xPefs5s… #NodeRED #NRCon2026

nvm.sh v0.40.8 is out, fixing a path traversal vuln and a number of bugs - cve.org/CVERecord?id=CVE-202… - github.com/nvm-sh/nvm/releas…

Last chance to share your feedback in the 2026 Node.js User Survey! If you use Node.js, take a few minutes to tell us about your experience, priorities, and what matters most to you. Take the survey: linuxfoundation.surveymonkey… #NodeJS #OpenSource

⚡ Still running an older Express version? Express 3 and earlier are EOL, Express 4 is in maintenance, and Express 5 is the active major release. 👇 Learn what EOL means for security and your upgrade options: tuxcare.com/blog/express-eol…

⚡ #Fastify v3 reached EOL in 2023, followed by v4 in 2025. Today, v5 is the actively supported release. EOL versions no longer receive upstream security fixes, so upgrading helps keep apps on maintained releases. 👇 Learn more: tuxcare.com/blog/fastify-eol…

NativeScript 9.1 adds Node-API support, so many existing Node native addons can run with little or no change. The test runner was also rebuilt around Vitest, running real tests on a real device. More: openjsf.org/blog/nativescrip…

Are you a Node.js user? We want your feedback. Tell us all about how you're using Node.js in our annual user survey. Your response helps shape our future priorities! linuxfoundation.surveymonkey…

So much love for the Node.js community. I gave my first ever tech talk at @NodeConfCo, and I got to show up for @RenderATL. Really grateful to the foundation for the opportunity.

What happens when the Node.js community gets together to talk about the future? A lot. 👀 Node.js Interactive 2026 brought developers, maintainers, speakers, and open source leaders together in Atlanta for conversations about the technology and, just as importantly, the people behind it. And there was a reminder worth repeating: open source infrastructure runs on people. Supporting maintainers and strengthening communities is how we keep the ecosystem moving forward. Catch up on the conversations and takeaways from Node.js Interactive 2026 👇 nodejs.org/en/blog/events/no… Thank you @aviv_keller for the post. And thank you @RenderATL for having us. WE LOVE OUR COMMUNITY!

The amazing @rginn206 opening Node.js Interactive @RenderATL, speaking about the responsibility of @openjsf, their commitment to sustainability, and the strength of the OSS ecosystem. 🤩

Hi from @nodejs Interactive at @RenderATL 👋 we've got talks this afternoon and tomorrow, plus a code and learn from 2-4pm on Thursday. Schedule here: renderatl.com/schedule

We're excited for this one. The @nodejs Interactive Code and Learn workshop is happening at RenderATL this Thursday, August 13, led by our friends at Harper. Attending @RenderATL? Join the nodejs-interactive-code-and-learn channel in Render's Discord ahead of time: discord.com/invite/cnCVB3Tgd… There's still time to register: renderatl.com/node

⚠️ Node.js 20 reached EOL on April 30, 2026, meaning it no longer receives security fixes. That risk can also extend to bundled components like OpenSSL, V8, undici, nghttp2, and zlib. 👇 Learn what EOL means for your apps and the options available: tuxcare.com/blog/node-js-ext…

✈️ Excited to be heading to speak at my first @RenderATL today alongside a cohort of folks for the Node Interactive/@openjsf track. I'm bringing some Canadian goodies 🍁 that I'm willing to trade for tarrif relief 😉 Don't miss my talk - Beyond SemVer - tomorrow at 2pm.

5 questions answered with @NodeSource on the Node.js Migration Program 👀 @edsadr dissects why you should upgrade your Node.js to the latest version. Check it out 👇

Open source security isn't a one-time fix. It's an ongoing commitment. As an official CVE Numbering Authority, the OpenJS Foundation coordinates vulnerability disclosure across the projects millions of developers rely on. Add in OpenPathfinder, our automated compliance dashboard, and quarterly security updates funded through our Alpha-Omega partnership, and you've got a foundation built to keep pace with real threats. Our Ecosystem Sustainability Program goes a step further, giving partners like HeroDevs, NodeSource and TuxCare a way to support end-of-life versions of Node.js, Express, jQuery, and more — so users aren't left exposed while they plan an upgrade. Want to see how the security program works? Read the latest update: openjsf.org/blog/openjs-secu…