I've already been working with node for some time and I have gathered a small listing of things that I (or some web developers) might find important and would be useful to share online.
Here is a list of the top 10 things to be aware of when using Node:
1. Use nvm whenever possible to make it easier to track multiple node instances in your environment.
2. If you are going to use npm for installations behind a proxy, make sure you have the environment settings globally applied on .npmrc for your running instance via
3. Do not over-burden your plugin system with a lot of unnecessary features, check the dependencies first on npm (if avail).
npm ls | grep "dep@version"(bash) or
npm ls | findstr "dep@version"(cmd) to easily filter relevant packages on npm when the installation list grows too large.
5. Check for
package-lock.json files first when you have issue with a package or after running
npm update to make sure you have non-corrupt modules. Delete
*-lock.json and files only when dependencies break your npm. Currently
package-lock.json is overwritten by default.
6. Compatibility checks on minor versions for newly added packages are easily applied by using
npm update instead of
7. Do not use
--force installs before checking for incompatibility between already installed modules, especially when running your build alongside a testing/build platform (e.g. mocha, commonjs or webpack).
8. When using raw html rendering via a templating engine such as jade or ejs be sure to properly escape characters in your template file to prevent injected malicious code.
9. Make sure you scan your default packages directory for vulnerabilities to keep your installations up-to-date with relevant security changes.
10. Node v12+ supports ES6 modules via usage of
"type":"module" in the
package.json file or including it as an
*.mjs extension. Loading is done via
import mod from './modulename' instead of