Kado JavaScript

@KadoJavaScript

An Open Source @NodeJS JavaScript Framework. #KadoJS #NodeJS #javascript #code #opensource #webdeveloper

668 Volgend815 Volgers1.1K Berichten
  1. Kado JavaScript@KadoJavaScript
    google just patched 52 chrome bugs that claude dug up, a few chained into a sandbox escape. if shipping a dependency bump still takes your team a month, that's the actual vuln. update chrome, then go update your lockfile #JavaScript #cybersecurity
    00010
  2. Kado JavaScript@KadoJavaScript
    42 real github repos from 11 legit owners got armed in the testmetest npm campaign. stars and a familiar name aren't a security review anymore. pin your versions and actually read the diff on updates #JavaScript #cybersecurity
    00018
  3. Kado JavaScript@KadoJavaScript
    an AGENTS.md file sitting in someone's downloads folder talked coding agents into installing a rogue npm package. read the instruction file before your agent does, and don't run agents out of ~/Downloads #JavaScript #cybersecurity
    00026
  4. Kado JavaScript@KadoJavaScript
    brotli bug now reaching ffmpeg and .net is the reminder. the dependency you don't know you have is the one that bites, and npm ls won't show a C lib compiled into something you installed
    00024
  5. Kado JavaScript@KadoJavaScript
    Sunday lesson from the week of PHP2Shell and Brotli: the dependency you can't name is the one you can't patch. Ten minutes with your lockfile beats ten hours of incident response. #JavaScript #nodejs
    00034
  6. Kado JavaScript@KadoJavaScript
    PHP2Shell, then Brotli/Node2Shell. This week every dependency was a pager. If you run Node, you want 22.23.4, 24.22.1 or 26.12.1. Then check what else bundles Brotli. Boring, stable, few deps is the best security strategy there is. #JavaScript #nodejs #CyberSecurity
    00071
  7. Kado JavaScript@KadoJavaScript
    Friday homework after Black October: run npm ls --all | wc -l on your main app. Every line is someone who can ship code into your build. Pick 3 you could swap for stdlib (fetch, crypto.randomUUID, fs/promises) and drop them. #nodejs #javascript #BlackOctober
    003139
  8. Kado JavaScript@KadoJavaScript
    Node.js fixed 10 CVEs yesterday (22.23.4 / 24.22.1 / 26.12.1). Check node -v in prod, not on your laptop. Rebuild Docker base images. Restart long-running processes. Upgrading is easier when there's no dependency tree to re-test. #nodejs #javascript #BlackOctober
    002119
  9. Bryan William✓@nullivex
    Berichten @anupamrjp
    @anupamrjp I just started to help the deployment world with all these new apps. I think its useful
    00050
  10. Kado JavaScript@KadoJavaScript
    Another week, another npm supply-chain campaign. Every dependency is someone else's release schedule and someone else's password. Kado ships 51 libraries with 0 external dependencies, so there's less to audit and less to go wrong.
    01144
  11. Kado JavaScript@KadoJavaScript
    We're going to show how is built on Kado, piece by piece. What do you want to see first? routing + views file upload/streaming tests running for years with little maintenance
    00026
  12. Kado JavaScript@KadoJavaScript
    Kado 4.4.0 shipped in Oct 2022 and it's still the current release. That's on purpose. Software that stores your files for years should run on code that doesn't churn every quarter. @BurstCloudCo runs on it.
    00048
  13. Kado JavaScript@KadoJavaScript
    Self-hosting GitLab? Patch today. 19.4.2 / 19.3.4 / 19.2.8 fix CVE-2026-97229 (CVSS 10): unauthenticated code execution via CI/CD config. is already patched. Your own box isn't until you upgrade. #CybersecurityAwarenessMonth
    01247
  14. Kado JavaScript@KadoJavaScript
    $ curl -sI | grep -i powered x-powered-by: Kado A production cloud drive, served by a Node.js framework with 0 external dependencies. npm install kado
    00016
  15. Kado JavaScript@KadoJavaScript
    BurstCloud runs on Kado. Same stack, same people, still shipping. If you want to see what Kado looks like in production, this is it. 👇
    00016
  16. Kado JavaScript@KadoJavaScript
    Kado JavaScript
    RT @BurstCloudCo: We went quiet. Your files didn't. BurstCloud is still here: an independent cloud drive built and run from Colorado. 15 GB free, plans from $2.99/mo. Over the next few weeks we'll show exactly how we keep your data. #CybersecurityAwarenessMonth #DataBackup
    0103