OpenJS Foundation

@RenderATL Our people 🙏

Two more speakers taking the stage at RenderATL. Joe Sepi has spent years advancing open source, JavaScript, and cloud technologies, while Jenna Zeigen is helping make one of the web's fastest applications even faster at Notion. Whether you're interested in Node.js, web performance, or modern engineering, these are two sessions worth adding to your schedule.

@RenderATL @nodejs See you there? Register today: renderatl.com/node

Node.js Interactive at @RenderATL — speaker lineup is live. QUIC in Node.js core. npm supply chain economics. Built-in TypeScript, test runners, and sqlite. AI agents with MCP. SemVer's next chapter. 15 speakers. One track. All @nodejs. 🔗openjsf.org/blog/node-inte…

OpenJS Security Update ⚠️ This quarter brought: - Node.js 26 release - major security release addressing 18 vulnerabilities - Removal of the security embargo requirement, - new LLM-assisted report classifier and web viewer for release management. - OpenJS CNA passed its one-year milestone - Ulises Gascón joined Alpha-Omega as an AI Security Engineer in Residence And more in our update blog: openjsf.org/blog/openjs-se… As always, thank you to our friends at @AlphaOmegaOSS

🗣️ Upgrade your Node.js 🗣️

Running Node-RED in production? Node-RED Con 2026 wants to hear from you. Edge deployments, AI integration, industrial automation — if you've solved something worth sharing, submit before July 31. 👉 nrcon.nodered.org #NodeRED #NRCon2026 #CallForPapers

@slicknet 💙

13 years ago today I made the first commit to the ESLint Git repo. It’s hard to believe that this project I cobbled together in my spare time over a couple of weeks is still going strong. I’ve been doing a lot of reflecting over these years and the journey it’s been. A thread.

@RenderATL 👁️👁️

my roommate asked why i'm so obsessed with javascript and i said "because the people who literally built node.js are gonna be in the same room as me in august" and she said "who's node" and i blacked out for 3 seconds

@NodeRED Can't wait!

Node-RED Con 2026 is happening! — November 3rd. The Call for Papers is now open. Have something to share with the community? Submit before July 31. 📋 nrcon.nodered.org #NodeRED #NRCon2026 #IIoT #EdgeComputing #CallForPapers

JavaScript doesn't belong to any single company. That's one of the things that makes it work. The language, the runtimes, the frameworks, the tooling — they've evolved through collaboration across competing interests, thousands of contributors, and decades of community work. The OpenJS Foundation exists to protect that. We're the neutral, independent home where critical JavaScript projects get governance, infrastructure, and support — without being beholden to any one organization's roadmap. That includes projects like Node.js, webpack, Electron, jQuery, ESLint, Mocha, and more than two dozen others. Projects your team probably depends on today. Open source sustainability isn't just about code. It's about making sure the people and communities behind that code have the structures they need to keep going. If your organization depends on JavaScript infrastructure, consider getting involved. Learn more about membership → openjsf.org/join

We're excited to welcome SQLRooms to the OpenJS Foundation as an Incubation Project! 🎉 SQLRooms is an open source React toolkit for building browser based analytics applications powered by DuckDB, making it easier to create fast, privacy focused, AI ready data experiences. Welcome to the community! Read more: openjsf.org/blog/sqlrooms-…

What happens when you combine JavaScript, GPU acceleration, and massive datasets? cosmos.gl v3. The latest release makes it easier to visualize and explore large scale graphs directly in the browser, helping developers turn millions of nodes and connections into something humans can actually understand. cosmos.gl is one of the newest projects in the OpenJS Foundation ecosystem and continues to raise the bar for web based visualization. 📖 Learn more about v3: openjsf.org/blog/cosmos-gl…

90% of the world's website are built on jQuery, and over 750 million websites are running an outdated version of jQuery right now. jQuery itself is actively maintained and the team continues to ship improvements. The problem is the long tail: sites that installed jQuery years ago and never upgraded. For organizations that can't migrate immediately, there's a practical option: HeroDevs' Never-Ending Support (NES) for jQuery provides ongoing security patches for end-of-life versions, buying teams the time they need to modernize without leaving production systems exposed in the meantime. This is the kind of ecosystem-wide thinking that makes open source sustainable at scale — not just shipping new versions, but making sure the organizations still running older ones have a safe path forward. Learn about jQuery NES → herodevs.com/support/jquery…

Node.js Interactive is back. If you've been part of the Node.js community for a while, you know what that name means — honest technical conversations, maintainers at the center, and real talk about what it takes to build production systems at scale. This August, Node.js Interactive returns as a dedicated track inside RenderATL 2026 in Atlanta, Georgia (August 12–13). It's included with a RenderATL conference pass. Expect programming on: → Node.js runtime performance → Security and supply chain resilience → AI-enabled developer tooling → Open source sustainability and platform engineering Whether you're a Node.js contributor, infrastructure engineer, or senior technical lead, this is worth your time. Read more and plan your trip → openjsf.org/blog/nodejs-in…

Still running an outdated version of Node.js, but not sure where to start? NodeSource (OpenJS ESP Partner), offers a free ✨ AI-powered assessment to help you understand exactly what it will take to upgrade. Run one command. Get a clear picture of your security exposure, dependency conflicts, broken native addons, and deprecated APIs — before you touch a single line of code. Your code never leaves your machine. The tool scans locally and generates a report you can share with your team or upload for a deeper AI analysis. Upgrading off end-of-life Node.js is one of the most impactful things you can do for your application's security posture. This tool makes it easier to know what you're getting into. Details: nodesource.com/products/nodej…

Understanding JavaScript security is more important than ever. Check out our free training course to better spot security flaws in JavaScript apps, design safer systems, and bring a security-first mindset to every stage of development. Details here: bit.ly/4vhXCay

ICYMI: the OpenJS Foundation officially announced that Node.js Interactive will return as a dedicated experience inside RenderATL 2026 on August 12–13 in Atlanta, Georgia. For engineers who remember the original conference, the name carries real history. 💚 Node.js Interactive was where maintainers and contributors gathered to have honest, technical conversations — about runtime performance, production lessons, security, and what comes next for the ecosystem. The summit is included with a RenderATL conference pass. Speaker and programming details are coming soon. → Read the full announcement: openjsf.org/blog/nodejs-in…

Despite the obvious downsides of running end-of-life releases, in practice many organizations face real constraints that prevent immediate upgrades — legacy codebases, compliance requirements, or complex dependency chains. Through the OpenJS Foundation Ecosystem Sustainability Program, Node.js is supported by HeroDevs and NodeSource to provide commercial services for security fixes. HeroDevs provides Never-Ending Support (NES) for Node.js versions past their official maintenance phase — including security patches, compliance assistance, and technical support to help bridge the gap while you plan your upgrade strategy. Commercial support for EOL releases should be viewed as a temporary solution. The goal should always be to upgrade to actively maintained versions. → Learn more: openjsf.org/blog/ecosystem…

You almost certainly use a project supported by the OpenJS Foundation — even if you've never heard of it. Node.js. Electron. Jest. webpack. ESLint. jQuery. Lodash. These are just some of the projects that call the OpenJS Foundation home. Together, they are downloaded billions of times each month and power applications across every industry. The OpenJS Foundation provides these projects and their maintainers with a neutral home, open governance, shared infrastructure, and security support — so they can focus on the work itself rather than the overhead of running major open source projects alone. Open source software doesn't maintain itself. It depends on people who need support and sustainable conditions to keep doing it. → Learn more about our projects: bit.ly/4vMoLC5