On April 24 the Node.js project released version 10.0.0 of Node.js and npm, Inc released version 6.0 of npm, the node package manager. Both releases emphasized security improvements, with Node.js 10.0.0 updating to OpenSSL version 1.1.0, and NPM including new security-focused features such as the automatic alerting of insecure dependencies.

Read full news article on InfoQ