Sign in

Marco Ippolito

@marcoippolito.dev
910 followers 149 following 216 posts

Security Engineer @herodevs | Node.js Technical Steering Committee & Release marcoippolito.dev

PostsRepliesMedia
Reposted by Marco Ippolito
Nico Kaiser @nico.kaiser.me · 29/09/2026
📸 #NodeConfEU @marcoippolito.dev: Rethinking HTTP in Node.js
082
Reposted by Marco Ippolito
James Snell @jasnell.me · 18/08/2026
The community support for @nodeconf.eu has been amazing so far! Let's fill the seats! Tickets are still available!
094
Reposted by Marco Ippolito
Darcy Clarke @darcyclarke.me · 04/08/2026
Excited to share vlt 1.0 along with our hosted registries & ecosystem mirrors now GA! A drop-in npm replacement, built so nothing runs on your machine just because you typed install. → faster delivery → malware blocking at the registry layer → graph-native querying
14416
Reposted by Marco Ippolito
NodeConf.eu @nodeconf.eu · 10/06/2026
#NodeConf EU is back! If you've been working on something worth sharing about #Node.js internals, performance, #developer experience, or anything in between, this is the stage for you! nodeconf.eu See you in Bologna! 🇮🇹
02210
Marco Ippolito @marcoippolito.dev · 30/05/2026
Caturday 😽
060
Marco Ippolito @marcoippolito.dev · 13/05/2026
Node.js v22.22.3 is out 🚀🚀 Changelog 👇 nodejs.org/en/blog/rele...
nodejs.org
Node.js — Node.js 22.22.3 (LTS)
Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.
0113
Reposted by Marco Ippolito
Node.js @nodejs.org · 08/05/2026
ICYMI (and we hope you didn't): Node.js 20 went EOL last week. But you have options. Check out our EOL support: nodejs.org/en/about/eol
0213
Reposted by Marco Ippolito
Matteo Collina @nodeland.dev · 07/05/2026
NodeConf EU is back in Bologna, Italy and it's going to be special 🇮🇹 Great talks, better people, and the kind of hallway track you can't replicate online. Blind tickets? Already gone. CFP open. Regular tickets moving. Join us: www.nodeconf.eu
nodeconf.eu
NodeConf EU 2026 | Bologna, Italy
NodeConf EU 2026 returns to Bologna with tickets, CFP, venue info, and conference links in one fast single-page experience.
0219
Reposted by Marco Ippolito
Jake Archibald @jakearchibald.com · 06/05/2026
We now have an 'open web API' that requires you to comply with Google's "terms of use". I know many at Chrome disagree with this, but feel they can't say anything publicly out of fear of internal retribution. github.com/mozilla/stan...
github.com
Prompt API · Issue #1213 · mozilla/standards-positions
Specification title Prompt API Specification or proposal URL (if available) No response Explainer URL (if available) https://github.com/webmachinelearning/prompt-api/blob/main/README.md Proposal au...
116838
Reposted by Marco Ippolito
Rafael Gonzaga | Node.js @rafaelgss.dev · 05/05/2026
Node.js v26.0.0 is out 💚 Temporal API enabled by default, V8 14.6, Undici 8, and key deprecations as we keep modernizing the platform. Check it out nodejs.org/en/blog/rele...
nodejs.org
Node.js — Node.js 26.0.0 (Current)
Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.
112735
Reposted by Marco Ippolito
Node.js @nodejs.org · 30/04/2026
Reminder: Node.js v20 is end-of-life (EOL) today. Upgrade + get security support for EOL versions here: nodejs.org/en/about/eol
nodejs.org
Node.js — End-Of-Life
Understand Node.js End-of-Life, what it means for security, tooling, and compliance, plus EOL version details and commercial support options.
06724
Marco Ippolito @marcoippolito.dev · 30/04/2026
It's time to close this issue. Node.js v20 goes end of life today! github.com/nodejs/Relea...
github.com
Release plan - v20.x Maintenance LTS · Issue #855 · nodejs/Release
Draft schedule - all dates subject to change Version Release Date Releaser v20.9.0 2023-10-24 @richardlau (LTS transition) v20.10.0 2023-11-22 @targos v20.11.0 2024-01-10 @UlisesGascon v20.11.1 202...
051
Reposted by Marco Ippolito
James Snell @jasnell.me · 17/04/2026
We are happy to announce the NodeConf EU is returning in 2026. This time, things will be a little different. While the Irish countryside made for a beauttiful backdrop for getting the community together to talk about Node.js, there have always been a number of logistical challenges to hosting there;
12914
Reposted by Marco Ippolito
James Snell @jasnell.me · 15/04/2026
Great Node.js Collab Summit in London the past 2 days. Lots accomplished.
Nerds in a Room.
2284
Marco Ippolito @marcoippolito.dev · 11/04/2026
Caturday
040
Reposted by Marco Ippolito
Node.js @nodejs.org · 10/03/2026
Node.js is moving to one major release per year starting with Node 27! 🚀 ✅ Simpler: Every release becomes LTS. ✅ Predictable: Version numbers now align with the year. ✅ New: A 6-month Alpha channel for early testing. bit.ly/4rnosLg
nodejs.org
Node.js — Evolving the Node.js Release Schedule
Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.
423360
Marco Ippolito @marcoippolito.dev · 05/03/2026
Node.js v22.22.1 is out 🔥 Release notes 👇 nodejs.org/en/blog/rele...
nodejs.org
Node.js — Node.js 22.22.1 (LTS)
Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.
0184
Marco Ippolito @marcoippolito.dev · 05/03/2026
Node.js v20.20.1 is out 🎉 This is the last planned release before v20 goes End-of-Life ❗ Release notes 👇 nodejs.org/en/blog/rele...
nodejs.org
Node.js — Node.js 20.20.1 (LTS)
Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.
0143
Marco Ippolito @marcoippolito.dev · 12/02/2026
I just found out @deno.land throws the same error as Node.js when trying to run typescript in node_modules. That's cool 🙏 github.com/denoland/den...
github.com
020
Marco Ippolito @marcoippolito.dev · 11/02/2026
github.com/nodejs/types...
github.com
The future of `--experimental-transform-types` · Issue #51 · nodejs/typescript
I wanted to talk about the future of --experimental-transform-types. The feature has been stable for a while no outstanding issue. The problem with this flag is that the syntax supported might chan...
041
Reposted by Marco Ippolito
Antoine du Hamel @aduh95.bsky.social · 10/02/2026
Node.js patch release day! Full changelog and download links at nodejs.org/en/blog/rele... and nodejs.org/en/blog/rele...
nodejs.org
Node.js — Node.js 24.13.1 (LTS)
Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.
0185
Marco Ippolito @marcoippolito.dev · 30/01/2026
See you at #FOSDEM tomorrow 💚
110
Reposted by Marco Ippolito
Rafael Gonzaga | Node.js @rafaelgss.dev · 29/01/2026
🚨 Node.js assessment of the recent OpenSSL Security Release TL;DR: We'll update OpenSSL versions through a regular release process. nodejs.org/en/blog/vuln...
nodejs.org
Node.js — OpenSSL Security Advisory Assessment, January 2026
Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.
062
Reposted by Marco Ippolito
Joyee Cheung @joyeecheung.bsky.social · 22/01/2026
This just landed! Thanks @addaleax.bsky.social and @legendecas.bsky.social for the reviews! It will be out in the next semver-minor release of 25, and likely backportable to older LTS - the new workflow is a compatible improvement to the existing postject-based SEA building workflows from v18.x.
0196
Marco Ippolito @marcoippolito.dev · 14/01/2026
This account is now operating on a cats-only basis
2110
Reposted by Marco Ippolito
Node.js @nodejs.org · 13/01/2026
We appreciate your patience and understanding as we work to deliver a secure and reliable release. Updates are now available for the 25.x, 24.x, 22.x, 20.x Node.js release lines to address: - 3 high severity issues - 4 medium severity issues - 1 low severity issue nodejs.org/en/blog/vuln...
nodejs.org
Node.js — Tuesday, January 13, 2026 Security Releases
Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.
16426
Reposted by Marco Ippolito
Rafael Gonzaga | Node.js @rafaelgss.dev · 08/01/2026
Node.s sec release We are doing our best. We are ensuring test passes on all platforms and all active release lines (v20, v22, v24 and v25) - and they aren't currently. Unfortunately, we don't have an ETA for that, and it's likely that this security release will be postponed one more time. Sorry.
084
Reposted by Marco Ippolito
Stefan Judis @stefanjudis.com · 06/01/2026
TIL that modern Node not only supports `--env-file` / `--env-file-if-exists` but also a new method to programmatically load .env files. It's been marked stable since Node v24 (current LTS), and I'm now on the journey of removing all the `dotenv` dependencies. 😅 www.stefanjudis.com/today-i-lear...
import { loadEnvFile } from 'node:process';

// load .env file with default path ('./.env`)
loadEnvFile();
// load .env file with a custom path
loadEnvFile('../../.env');
79314
Marco Ippolito @marcoippolito.dev · 05/01/2026
Welcome Frieren 💜
050
Marco Ippolito @marcoippolito.dev · 19/12/2025
Thank you @awscloud.bsky.social soooo much for sponsoring me on @github.com 🙏 what a present 🎁 github.com/sponsors/mar...
github.com
Sponsor @marco-ippolito on GitHub Sponsors
Hi I'm Marco and I work on Node.js
080
Marco Ippolito @marcoippolito.dev · 17/12/2025
⚠️ Node.js security release has been postponed ⚠️ We have decided to delay the security release further to January 7th 2026 to ensure the team has enough time to prepare the releases and avoid distruptions during the holiday season. nodejs.org/en/blog/vuln...
nodejs.org
Node.js — Wednesday, January 7, 2026 Security Releases
Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.
0153
Marco Ippolito @marcoippolito.dev · 15/12/2025
⚠️ The security release has been postponed to the 18th of December. The team is working on a challenging patch.
0194
Marco Ippolito @marcoippolito.dev · 10/12/2025
Type stripping is stable in a LTS version 👽
0446
Reposted by Marco Ippolito
Kamran Ayub @kamranicus.com · 10/12/2025
Type stripping landed in Node 24 LTS 40 minutes ago! Thanks @marcoippolito.dev! github.com/nodejs/node/...
github.com
Release 2025-12-10, Version 24.12.0 'Krypton' (LTS), @targos · nodejs/node
Notable Changes [1a00b5f68a] - (SEMVER-MINOR) http: add optimizeEmptyRequests server option (Rafael Gonzaga) #59778 [ff5754077d] - (SEMVER-MINOR) lib: add options to util.deprecate (Rafael Gonzaga...
193
Marco Ippolito @marcoippolito.dev · 08/12/2025
❗️Node.js Security release pre-alert ❗️ We will release new versions of v20, v22, v24, v25 release lines on or shortly after the 15th of December 2025 in order to address: * 3 high severity issues. * 1 low severity issue. * 1 medium severity issue. nodejs.org/en/blog/vuln...
nodejs.org
Node.js — Monday, December 15, 2025 Security Releases
Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.
0187
Marco Ippolito @marcoippolito.dev · 25/11/2025
Node.js v20.19.6 is out 🥳 Release notes: nodejs.org/en/blog/rele...
nodejs.org
Node.js — Node.js v20.19.6 (LTS)
Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.
0154
Reposted by Marco Ippolito
Rob Palmer @robpalmer.bsky.social · 24/11/2025
Node & TypeScript excitement 😉 Marco tells the story of implementing Type Stripping support in Node. It involves a lot of collaboration across the JS ecosystem. 🔷 First cut took 20 days (fast for Node) 🔷 TS delivered flags to ease adoption 🔷 Marco's reward: a bread machine
2272
Marco Ippolito @marcoippolito.dev · 24/11/2025
Just published a new blog post. It’s about my experience shipping Node.js native TypeScript support. It’s not a technical blog post, it's about my perspective, what it felt like and what I learned along the way. satanacchio.hashnode.dev/the-summer-i...
satanacchio.hashnode.dev
2204
Reposted by Marco Ippolito
Adam Chalmers @adamchalmers.com · 14/06/2025
on type safety
Frog and Toad illustration edited to say: Frog put the value in an option. "There", he said, "now we will not deref any more null pointers". "But we can unwrap the option," said Toad. "That is true", said Frog.
849392
Marco Ippolito @marcoippolito.dev · 21/11/2025
Good first issue in Node.js github.com/nodejs/node/...
github.com
--experimental-strip-types default value should depend on --without-amaro configure flag · Issue #60640 · nodejs/node
Version git november 8 2025 Platform All... Subsystem No response What steps will reproduce the bug? Build with --without-amaro flag, several tests will fail (parallel/test-worker-syntax-error is a...
050
Marco Ippolito @marcoippolito.dev · 17/11/2025
good first issue github.com/nodejs/amaro...
github.com
swc update workflow is broken · Issue #329 · nodejs/amaro
We have a build failure https://github.com/nodejs/amaro/actions/runs/19414263623/job/55540131804#step:8:1 The swc update workflow is failing
000
Reposted by Marco Ippolito
Rob Palmer @robpalmer.bsky.social · 16/11/2025
At JsConf.jp @marcoippolito.dev is telling us about built-in TypeScript support in Node. Node's type-stripping is performed by SWC and was inspired by ts-blank-space bloomberg.github.io/ts-blank-spa...
3253
Reposted by Marco Ippolito
Rob Palmer @robpalmer.bsky.social · 12/11/2025
Node excitement 😉 Congrats to @marcoippolito.dev on making it official: type-stripping in Node 25 is now declared to be stable 🎉 You can run: node index.ts The capabilities have not changed since Node 24. This is purely a maturity indicator.
116528
Marco Ippolito @marcoippolito.dev · 12/11/2025
Type stripping is now stable. Enjoy 🌞
412925
Marco Ippolito @marcoippolito.dev · 06/11/2025
it's time github.com/nodejs/node/...
4276
Reposted by Marco Ippolito
Ruy Adorno @ruyadorno.com · 16/10/2025
Here are the slides for my Node.js year in review talk: speakerdeck.com/ruyadorno/no... #nodejs #javascript #JSConf
speakerdeck.com
Node.js 2025: What's new and what's next
This talks is a recap of what went on in the Node.js runtime in 2024-2025. Presented at JSConf US 2025
33916
Reposted by Marco Ippolito
Node.js @nodejs.org · 13/10/2025
Node.js v24.10.0 is out. * Per-stream inspectOptions support in console * Removal of util.getCallSite (in favour of util.getCallSites) * Upgraded OpenSSL to 3.5.4 and npm to 11.6.1 * Various src and benchmark optimizations nodejs.org/en/blog/release/v24.10.0
nodejs.org
Node.js
Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.
0417
Reposted by Marco Ippolito
Nordic.js @nordicjs.com · 03/10/2025
Marco Ippolito introduces node.config.json in Node.js v23, a long-awaited config file that finally makes runtime flag management structured and predictable. 🚀 #NordicJS #NordicJS2025
071
Reposted by Marco Ippolito
danielroe @danielroe.dev · 29/09/2025
please do fill this out! it's one of the good surveys and I always find taking it to be informative and fun. ✨ ... and, if you're not always represented in surveys like this, it would be particularly good to hear your voice 🙏
2235
Reposted by Marco Ippolito
jviide.iki.fi @jviide.iki.fi · 12/09/2025
pnpm v10.16.0 adds "minimumReleaseAge", a setting for defining how long a version has to have been published before pnpm will install it. A nice countermeasure against accidental installs of short-lived compromised packages before they get taken down. Not a 100% fix, but a great additional step!
github.com
Release pnpm 10.16 · pnpm/pnpm
Minor Changes There have been several incidents recently where popular packages were successfully attacked. To reduce the risk of installing a compromised version, we are introducing a new settin...
819864