Node Chinese Weekly #203 - Node.js v25.2.1 Released, Type Stripping Feature Stabilized
π Weekly Developer Bulletin

> Highlights This Issue:
> - Node.js v25.2.1 Released β Type Stripping feature now stable
> - Electron vs. Tauri comparative analysis for desktop apps
> - V8 Garbage Collector progress in the last two years
> - Inquirer.js v13.0 β Full migration to ESM and modernization
---
π₯ This Weekβs Hot Topics
Node.js v25.2.1 β Type Stripping Now Stable
Following last week's bulletin, Node.js released v25.2.0 and marked TypeScript type stripping as stable. This makes official TypeScript type removal support part of mainstream Node runtimes.
A follow-up patch (v25.2.1) resolved a spec-related bug where accessing `localStorage` could throw exceptions. A full fix is expected in v26.
π Release Notes:
https://nodejs.org/en/blog/release/v25.2.1

Antoine du Hamel
---
Electron vs. Tauri for Desktop Apps
An open-source team experienced with JavaScript + Electron tested Rust-based Tauri. Result: Mixed but generally positive. Most of the core remained JavaScript-compatible.
π Detailed Blog Post:
https://www.dolthub.com/blog/2025-11-13-electron-vs-tauri/

Eric Richardson
---
V8 Garbage Collector β 2 Years of Improvements
Andy Wingo offers an in-depth review of V8 GC evolution over the past two years β a technical yet valuable read for engine internals enthusiasts.
π Full Analysis:
https://wingolog.org/archives/2025/11/13/the-last-couple-years-in-v8s-garbage-collector

Andy Wingo
---
π‘ Developer Tips & Tools
Automating NPM Token Rotation in GitHub Actions
If automation scripts fail due to npmβs new security policies, hereβs how to keep your publishing pipeline working β even without "trusted publishing".
π Read More:
https://michaelheap.com/rotate-all-npm-tokens-github-actions/

---
Deprecating Methods in Node.js
Node has a built-in `deprecate` method! Stefan Judis explains how to use it effectively.
π Original Article:
https://www.stefanjudis.com/today-i-learned/deprecate-method-in-node-js/

---
Tinyglobby Modernization
Madeline GurriarΓ‘n shares how Tinyglobby was modernized and optimized for better performance.
π Migration Story:
https://e18e.dev/blog/tinyglobby-migration.html

---
NPM Spam Campaign β βThe Great Indonesian TEA Theftβ
Staicu & Raj (Endor Labs) analyze a bizarre spam incident in npm packages.
π Read the Analysis:
https://www.endorlabs.com/learn/the-great-indonesian-tea-theft-analyzing-a-npm-spam-campaign

---
Secure Coding in JavaScript
Tanya Janca offers practical, actionable security advice for writing safer JS.
π Read on StackOverflow Blog:
https://stackoverflow.blog/2025/10/15/secure-coding-in-javascript/

---
π’ Quick News
- OpenJS Foundation October 2025 Security Update β Node.js still dominates security topics.
- π Read the Update
- Reddit /r/node Debate β NestJS pros and cons discussed heatedly.
- π See the discussion


- /r/node Activity Analysis β More active than /r/javascript surprisingly.
- `Error.captureStackTrace` API β Proposal reaches TC39 Stage 2.
- π API Docs

- Node.js v24.11.1 (LTS) β Fixes `Buffer.allocUnsafe` bug.
- π Release Notes

---
π Code & Tools
Inquirer.js v13.0
Interactive CLI components modernized:
- Migrated to ES Modules
- Dropped CommonJS
- Updated styles with Nodeβs `styleText`
π GitHub Repo

---
Globby v16.0
Glob string matching with:
- Pure negation support
- `.gitignore` inheritance from parent directories
π GitHub Repo

---
node-libcurl v5.0
Node bindings for libcurl β now upgraded to libcurl v8.17.0 with HTTP/3 support.
π GitHub Repo

---
Ackee v3.5
Selfβhosted web analytics built with Node.
π Website

---
Marked.js v17.0
Highβperformance Markdown compiler for JS (browser, Node, CLI).
π Website

---
π Other Ecosystem Updates

- VS Code v1.106 β Improved diff views, inline suggestion snooze, byte/column offsets in "Go to line", Terminal IntelliSense is now stable.
- π Details
- Git 2.52 β Adds `git last-modified` to find the latest commit modifying a file.
- π Highlights


- LibreOffice + JavaScript β Yes, you can create a Wordle-style game.
- π Read How
---
Notable Sites & Fun Reads
- JavaScript Engines Zoo β Database of 100+ JS engines.
- π Visit
- Visual Types β Interactive TypeScript type visualizer.
- π Explore


- Home Data Centers for Heating in UK β Servers warming homes for free.
- π BBC Article
- Nginx Rate Limiting Tutorial β Beginner-friendly guide.
- π Read


---
π¦ Version Releases
- pnpm v10.22 β New `trustPolicyExclude` config.
- MikroORM v6.6 β Flexible association filtering + private property support.
- OpenAI Node v6.9 β GPT-5.1 support.
- ESLint v10.0.0 Alpha 0 β First alpha with breaking changes.
- LogTape v1.2 β Lightweight logging updates.
- pg-boss v12.2 β Postgres-backed task queue improvements.
- Mercurius v16.6 β Fastify-based GraphQL server updates.
- FoalTS v5.1 β Feature-rich Node app framework update.
---
π‘ Pro Tip: As new tools and APIs emerge, streamline multi-platform publishing for dev blogs, docs, and tutorials.
Platforms like AiToEarn integrate:
- AI content generation
- Cross-platform publishing (Douyin, Kwai, WeChat, Bilibili, Facebook, Instagram, LinkedIn, Threads, YouTube, Pinterest, X)
- Analytics & model ranking
For technical creators, this means shipping insights as efficiently as shipping code.
---
Would you like me to also add a clean, linked table of all these releases and resources for quick reference? That way readers can instantly jump to topics.