Node.js Backend Master Class and other Adventures in Nodeland - Issue #85

Hi Folks, last week has been exciting. I traveled to London to speak at HalfStack and Modern Frontends Live. I’ve met a lot of old friends, as well as met a few folks I only talked to online.

HalfStack was like attending a full-day concert of your local band. Thanks Dylan for organizing it, I would definitely recommend everybody to attend.

I was disappointed by Modern Frontends Live. I expected the talks to be recorded (and live-streamed), so many people could watch them, but the organizers let us down. Take a moment to read Jo Frachetti‘s review. On the bright side, the speaker lineup of the conference was stellar, and I met so many internet-only friends there. I hope to spend more time with them at future events.

Node.js Backend Master Class

I will do a Node.js Backend Masterclass in two weeks, teaching how to structure Node.js applications (link on the image).

Releases

• fastify v4.10.2 and v3.29.4 fix a potential CSRF issue when using Fastify without a CORS policy in place. You can read more at GHSA-3fjj-p79j-c9hh. This is CVE-2022-41919.
• env-schema v5.1.1
• @fastify/jwt v6.3.3: adds onlyCookie verify option tests and types.
• fastify-cli v5.6.0 adds the create eject --esm command.
• async-cache-dedupe v1.6.0 fixes the support for using functions as ttl.
• @fastify/autoload v5.5.0

Videos

• My talk at JetBrains JavaScript 2022 https://www.youtube.com/watch?v=qfRQ5zhYuJE

Articles

• Too much efficiency makes everything worse: overfitting and the strong version of Goodhart’s law - coming from the amazing C J Silverio - This got me to rethink at my times in University of my concept of studying vs preparing for the exam. The latter was easier.
• The evolution of scalable CSS
• Mastodon on your own domain without hosting a server - This is how I configured my nodeland.dev domain to act as a redirect to my mastodon account.

Protecting your community in Open Source

Here are a few interesting readings about how to license your new Open Source project and protect the community and yourself at the same time:

• Legally Ignoring The License
• Apache License Yes, Apache CLA No
• Rights ratchet

As the CTO of Platformatic, I greatly pondered the problem. I concluded that adopting the Developer Certification of Origin is the best guarantee I can give anyone willing to contribute to Platformatic.