OpenJS Foundation

A home for those who love JavaScript.

[OpenJS Foundation @openjsf]

AI is finding open source bugs faster than people can fix them.

Node.js fixed a record 50 vulnerabilities this year. The bots find them, but maintainers triage, patch, and coordinate disclosure.

If your company runs on open source, fund the people keeping it secure.
https://t.co/JsPlVN3AGc

[OpenJS Foundation @openjsf]

Do all security vulnerabilities need to be fixed in private?

With support from @SovereignTechFund, OpenJS is using @nodejs to test whether some vulnerabilities can be remediated faster in the open without increasing security risk.

Read more: https://t.co/0UEG9Salz3

[OpenJS Foundation @openjsf]

🔄 Node.js is changing how it approaches major releases.

Node.js 26 will be the final release under the project’s twice-yearly model. Starting with Node.js 27, new major versions will follow an annual release schedule, giving developers a more predictable lifecycle to plan around.

But a clearer release schedule does not automatically move production applications forward. If your application is still tied to Node.js 12, 14, 16, 18, or 20, upgrading may require dependency updates, compatibility testing, and changes to application behavior.

@TuxCare_ 's Endless Lifecycle Support provides ongoing CVE patches for these Node.js versions, so you can keep your application protected while working toward a supported release.

Learn more:
https://t.co/sG9jw2nWHF

[OpenJS Foundation @openjsf]

A new major release from the WebdriverIO community: WebdriverIO v10.

New agent workflows, improved tracing and debugging, Appium 3 support, WebDriver BiDi updates, and more.

Built with contributions from 191 people across 1,725 PRs.

https://t.co/j2m0sDpyB2

[OpenJS Foundation @openjsf]

📣 ICYMI: The OpenJS Foundation CNA is taking a coordinated break through October 6 📣

Routine security operations are paused, but emergency support remains available for critical vulnerabilities and actively exploited issues.

Details: https://t.co/6ii9u4HrOA

[OpenJS Foundation @openjsf]

Finding vulnerabilities is only part of open source security. Maintainers still need resources to triage, patch, and ship secure releases.

The new OpenJS Security Stewardship Program will fund researchers and maintainers, starting with Node.js.

https://t.co/gBxdqt9mBX

[Node-RED @NodeRED]

Registration for Node-RED Con 2026 is now open.

The programme is set and it's a strong one. November 3rd, free and online. Don't miss it.

https://t.co/S7KFdgNNBa

#NodeRED #NRCon2026

[Jordan Harband @ljharb]

https://t.co/p3VZgPV0fI v0.40.8 is out, fixing a path traversal vuln and a number of bugs

- https://t.co/8o2C9CHjqd
- https://t.co/3LO3et2WSE

[OpenJS Foundation @openjsf]

Last chance to share your feedback in the 2026 Node.js User Survey!

If you use Node.js, take a few minutes to tell us about your experience, priorities, and what matters most to you.

Take the survey: https://t.co/MjkWBRn91q
#NodeJS #OpenSource

[TuxCare @TuxCare_]

⚡ Still running an older Express version?

Express 3 and earlier are EOL, Express 4 is in maintenance, and Express 5 is the active major release.

👇 Learn what EOL means for security and your upgrade options:
https://t.co/0azx3FeY9r

[TuxCare @TuxCare_]

⚡ #Fastify v3 reached EOL in 2023, followed by v4 in 2025. Today, v5 is the actively supported release.

EOL versions no longer receive upstream security fixes, so upgrading helps keep apps on maintained releases.

👇 Learn more:
https://t.co/RNbzU0rQV7

[OpenJS Foundation @openjsf]

NativeScript 9.1 adds Node-API support, so many existing Node native addons can run with little or no change. The test runner was also rebuilt around Vitest, running real tests on a real device.

More: https://t.co/MKDrMVw0vl

[OpenJS Foundation @openjsf]

@nodejs Please tell the turtle your thoughts 👀

[Node.js @nodejs]

Are you a Node.js user? We want your feedback.

Tell us all about how you're using Node.js in our annual user survey. Your response helps shape our future priorities!

https://t.co/k9WE1XGauZ

[Andrea @acolombiadev]

So much love for the Node.js community.

I gave my first ever tech talk at @NodeConfCo, and I got to show up for @RenderATL. Really grateful to the foundation for the opportunity.

[OpenJS Foundation @openjsf]

What happens when the Node.js community gets together to talk about the future? A lot. 👀

Node.js Interactive 2026 brought developers, maintainers, speakers, and open source leaders together in Atlanta for conversations about the technology and, just as importantly, the people behind it.

And there was a reminder worth repeating: open source infrastructure runs on people. Supporting maintainers and strengthening communities is how we keep the ecosystem moving forward.

Catch up on the conversations and takeaways from Node.js Interactive 2026 👇
https://t.co/96bKhuP97c

Thank you @aviv_keller for the post. And thank you @RenderATL for having us.

WE LOVE OUR COMMUNITY!

[OpenJS Foundation @openjsf]

@acolombiadev @rginn206 @RenderATL Love this!

[Andrea @acolombiadev]

The amazing @rginn206 opening Node.js Interactive @RenderATL, speaking about the responsibility of @openjsf, their commitment to sustainability, and the strength of the OSS ecosystem. 🤩

[OpenJS Foundation @openjsf]

Hi from @nodejs Interactive at @RenderATL 👋 we've got talks this afternoon and tomorrow, plus a code and learn from 2-4pm on Thursday.

Schedule here: https://t.co/YNAH1PiO5Q