Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

26.2.0 is already out, why link to the previous release?

https://nodejs.org/en/blog/release/v26.2.0

What I would expect with the inclusion of temporal, is having a section on nodejs docs about Rust addons, alongside the C and C++ sections.



That's on me - I saw v26 was released, but didn't realize they'd already done a point release in the ensuing 2-3 weeks!


https://nodejs.org/en/blog/release/v26.1.0 is particularly cool as it added initial FFI support.


This API is inherently unsafe. Invalid pointers, incorrect signatures, or accessing memory after it has been freed can crash the process or corrupt memory.

Absolutely great idea to expose such "features" to the web dev world!

All the JS devs that are already struggling with mildly complicated language features will love the giant new field of bugs they only dreamed of.

The arrival of the first very hyped tool that will make activating FFI support a requirement will be a great moment in JS history. Happily an army of mildly educated web devs will activate a feature which potential risks they do not even understand.

Luckily nowadays supply chain attacks are a thing of the past in the JS world, oh, wait...


Criticism noted! But it is experimental, unconstrained FFI is inherently unsafe, and not all JavaScript developers are "mildly educated web devs".

I doubt we'll see this go into mainstream dependencies likely to be used by such developers – it hasn't in Ruby which has had easily accessible FFI mechanisms for years.

Though, there is already a fun experiment using it: https://blog.platformatic.dev/destino-doom-terminal-nodejs-f...




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: