The Programmer’s Fulcrum: 20 March, 2026

Welcome to this week’s The Programmer’s Fulcrum.

It’s your weekly review of the essential news in the Open Media Network and Fediverse development communities with a focus on devastating big tech via Techno Anarchism. We aim to provide actionable content you can use to destroy Techno Feudalism each week. It has the additional benefit of weakening authoritarianism.

IMHO, the best way to do […]

https://newsletter.mobileatom.net/the-programmers-fulcrum-20-march-2026/ #ActivityPub #Akkoma #ATProto #bluesky #Buttondown #CSS #Drupal #DrupalCMS #fediverse #Friendica #GNOME #Gutenberg #Holos #HTML #HTMX #Hubzilla #Inkwell #javascript #Joplin #Linux #Madblog #Markdown #Mastodon #MicroBlog #NodeBB #nodejs #OMN #OpenProject #PostmarketOS #Sigil #Tangled #Twig #WebComponents #WordPress
Node.js — Tuesday, March 24, 2026 Security Releases

Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.

Optimo te ayuda a comprimir, convertir y redimensionar #imágenes y vídeos desde la CLI ⚡

Es gratis, de código abierto y funciona en #Windows, macOS y Linux.

Muy práctica si te gusta ahorrar tiempo con #NodeJS y automatizar tareas con FFmpeg.

➡️ https://www.softandapps.info/2026/03/21/optimizar-imagenes-y-videos-desde-cli/

🚨 Another supply chain attack:

Attackers republished 29 legitimate npm packages with a backdoor using compromised publisher access, enabling further propagation via stolen tokens and payload delivery through an ICP canister.

Details: https://socket.dev/blog/canisterworm-npm-publisher-compromise-deploys-backdoor-across-29-packages
#NodeJS

CanisterWorm: npm Publisher Compromise Deploys Backdoor Acro...

The worm-enabled campaign hit @emilgroup and @teale.io, then used an ICP canister to deliver follow-on payloads.

Socket

Petition to Node.js TSC: No AI Code in Node.js Core, by @indutny:

https://github.com/indutny/no-ai-in-nodejs-core

#nodejs #ai

GitHub - indutny/no-ai-in-nodejs-core: A petition to disallow acceptance of LLM assisted Pull Requests in Node.js core

A petition to disallow acceptance of LLM assisted Pull Requests in Node.js core - indutny/no-ai-in-nodejs-core

GitHub

Mes notes hebdo de ce 20 Mars :

🖋️ Un #extrait du Cabinet des mauvais souvenirs ( #extract )
🚀 L'importance des scripts #nodejs pour #automatiser les tâches ( #automate )
🌹 Création d'un tapis fleuri ( #printemps #spring #fleurs #flowers )
🐉 #MonsterHunterStories3

🇫🇷 https://blog.dunstetter.fr/fr/posts/notes-hebdo-20-mars-2026/
🇺🇸 https://blog.dunstetter.fr/posts/weekly-notes-march-20-2026/

Notes hebdo, 20 mars 2026 | Blog d'une Belette Sauvage

Côté écriture #Le Cabinet des Mauvais Souvenirs : « Cassan n’est pas enquêteur pour rien. Il a l’œil. Quand il a reçu dans ce même bureau la jeune automobiliste niant avoir percuté l’adolescent au niveau du pont Tour-Ramiers, il a noté l’angoisse qui lui faisait triturer sans cesse le pendentif à son cou : un hippocampe, représentation locale de Chimène, la Pèlerine blanche, l’esprit qui guide les humains. Cette jeune femme croit en Chimène et cherche un signe de l’esprit équin, un signe qui la guidera hors du guêpier dans lequel elle s’est fourrée. « Je n’ai vu personne d’autre. » a-t-elle dit. Aucun témoin pour corroborer son histoire.

Node.js Worker Threads Are Problematic, but They Work Great for Us, by @inngest.com:

https://www.inngest.com/blog/node-worker-threads

#nodejs #workerthreads #eventloop

Node.js worker threads are problematic, but they work great for us - Inngest Blog

Worker threads solve real problems, but they come with constraints that Go, Rust, and Python developers would never expect. Here's what we learned moving Inngest Connect's internals off the main thread.

I’ve become convinced that using zod + a strongly-typed API client layer to share types between frontend and backend is bad, actually. It makes tight coupling way too easy, especially when trying to release backwards-compatible changes.

I’m facing my second multi-day change due to someone building on a shared model which doesn’t separate “write” types from “read” types. The result is that, without reworking a whole mess of models, I can’t add an optional property to a backend response without making a host of changes to the frontend (which should not be aware of the backend change at all). Sure, this could be avoided with care, but the ergonomics of the system push people so hard towards doing the wrong thing.

Manual DTOs are the way to go, preferably with a generated OpenAPI client for the frontend.

#TypeScript #programming #nodejs

Developing Your Initial Node.js Microservice | User Service from Scratch to Cloud 2026

Modern cloud architecture demands modularity, and 2026 standards for microservices are more stringent than ever regarding scalability and performance. This guide walks you through the essential engine...

📺 Watch here: https://www.youtube.com/watch?v=YHc48ffAoKk

##Nodejs ##Microservices ##CloudComputing ##BackendDevelopment

3. Build Your First Node.js Microservice | User Service from Zero to Cloud 2026

YouTube
One Open-source Project Daily

CORS Anywhere is a NodeJS reverse proxy which adds CORS headers to the proxied request.

https://github.com/Rob--W/cors-anywhere

#1ospd #opensource #cors #nodejs
GitHub - Rob--W/cors-anywhere: CORS Anywhere is a NodeJS reverse proxy which adds CORS headers to the proxied request.

CORS Anywhere is a NodeJS reverse proxy which adds CORS headers to the proxied request. - Rob--W/cors-anywhere

GitHub