Mastodawn

2/3 of Node(dot)Js Users Run an Outdated Version. So #OpenJS Announces Program Offering Upgrade Providers

https://it.slashdot.org/story/26/03/08/0236233/23-of-nodejs-users-run-an-outdated-version-so-openjs-announces-program-offering-upgrade-providers

#NodeJS #Node #cybersecurity #FOSS

2/3 of Node.Js Users Run an Outdated Version. So OpenJS Announces Program Offering Upgrade Providers - Slashdot

How many Node.js users are running unsupported or outdated versions. Roughly two thirds, according to data from Node's nonprofit steward, OpenJS. So they've announced "the Node.js LTS Upgrade and Modernization program" to help enterprises move safely off legacy/end-of-life Node.js. "This program ...

Frontend Dogma Jan 30

OpenJS Foundation Security Program: Annual Report 2025, by @openjsf:

https://openjsf.org/blog/openjs-security-annual-report-2025

#openjs

OpenJS Foundation Security Program: Annual Report 2025 | OpenJS Foundation

The OpenJS Foundation, supported by generous funding from Alpha-Omega, made significant progress strengthening security for Node.js and the wider OpenJS project ecosystem in 2025.

OpenJS Foundation

Frontend Dogma Nov 2, 2025

Lit Is Joining the OpenJS Foundation, by @lit.dev:

https://lit.dev/blog/2025-10-14-openjs/

#lit #openjs

Lit is Joining the OpenJS Foundation!

Lit is officially joining the OpenJS Foundation as an Impact Project!

lit.dev

Ulises Gascon Oct 27, 2025

🚀 Recent #Lodash updates focus on stronger #CI & #security posture!

✅ CI support expanded (Node 4 → 25)

🌐 New browser tests via #Playwright

📝 Docs now have dedicated CI

🔒 Added #OpenJS #CNA escalation policy

📊 Reporting #OSSF #Scorecard

🧯 New Incident Response Plan (#IRP)

🧠 Threat Model inspired by #Express & #Webpack

More details: https://blog.ulisesgascon.com/the-future-of-lodash

The Future of Lodash

Lodash begins a new stage with a more collaborative and sustainable model. This post outlines the plan to simplify its maintenance, strengthen security, and ensure its key role in the JavaScript ecosystem for the coming years.

TonySpegel Oct 14, 2025

#Lit is now an OpenJS Foundation Impact Project, transitioning to an open governance model.
It's my go-to for web components and has been trusted by many large projects for years, check it out 🤠

https://lit.dev/blog/2025-10-14-openjs/

#OpenJS #WebComponents

Lit is Joining the OpenJS Foundation!

Lit is officially joining the OpenJS Foundation as an Impact Project!

lit.dev

Ulises Gascon Sep 22, 2025

Welcome Rafael Gonzaga to the #OpenJS #CNA team! 👏 👏 👏

https://github.com/openjs-foundation/security-collab-space/pull/297

Ulises Gascon Sep 5, 2025

🍿 Exciting news! The #OpenJS Foundation #AI Collaboration Space holds its first meeting next week.

A community hub where developers, maintainers and policy thinkers explore how #JavaScript connects billions of people to #AI.

https://github.com/openjs-foundation/ai-collab-space

GitHub - openjs-foundation/ai-collab-space: A community hub exploring how JavaScript powers the future of AI.

A community hub exploring how JavaScript powers the future of AI. - openjs-foundation/ai-collab-space

GitHub

Ulises Gascon Sep 2, 2025

🗞️ Exciting news: #webpack now has a Security Working Group!

We’ll:
👉 Define triage & policies
👉 Guide secure plugin development
👉 Improve report processes
👉 Promote best practices
👉 Support #OpenJS & #OpenSSF initiatives

https://github.com/webpack/security-wg