Lodash creator John-David Dalton reflects on the project’s growth, the pressures of maintaining software used across the world, and the personal journey that led to stepping back and eventually rebuilding a sustainable path forward.

RSAC 2026 Brief from Robin Bender Ginn, Executive Director, OpenJS Foundation

The Node.js LTS Upgrade and Modernization program helps enterprises move safely off legacy and end-of-life Node.js versions.

The OpenJS Foundation welcomes Socket as a Silver Member, strengthening vendor neutral support for JavaScript security and sustainability. 

AI is changing how software vulnerabilities are discovered and how quickly they are reported. For community-led open source projects, this shift is both promising and deeply challenging.

The OpenJS Foundation, supported by generous funding from Alpha-Omega, made significant progress strengthening security for Node.js and the wider OpenJS project ecosystem in 2025.

OpenJS Foundation is hosting a dedicated summit at RenderATL, built just for Node.js and JavaScript folks.

With the release of Lodash 4.17.23 and the publication of CVE-2025-134655, the project is making visible progress in strengthening its security posture.

Check out the recap and watch the sessions from the Open Visualization Collaborator Summit 2025!

Phasing out the JavaScriptLandia Individual Contributor Program

The OpenJS Security Collaboration Space has been working closely with GitHub’s npm team to understand how new security features affect projects and maintainers, especially as threats and tools keep evolving.

From new threat modeling practices to ecosystem-wide coordination, npm security discussions, and major Node.js security enhancements, this update recaps the key progress made in October 2025.

Perspective Joins OpenJS Foundation to Broaden Community Impact

Celebrating our community members with the fourth annual JavaScriptLandia awards

With OpenJS support, Lodash is becoming more secure, more modern, and guided by a broader community of contributors

Through the OpenJS Ecosystem Sustainability Program, NodeSource will help organizations using outdated and unsupported versions of Node.js stay secure as they plan their upgrades.

Lit joins a neutral home within the OpenJS Foundation community

HackMD donates services to OpenJS projects while building on OpenJS technologies

A New Era for React, and a Stronger JavaScript Ecosystem

Codemod partners with OpenJS to simplify Node.js migrations

OpenJS signs joint industry statement on sustainable open infrastructure

Providing Hosted Projects with the Tools and Guidance to Manage Security Confidently

GeoDa AI will be part of the OpenJS Foundation's Open Visualization Collaboration Space, joining other open source tools that make working with complex visual data easier.

The OpenJS Foundation is pleased to announce the launch of Introduction to JavaScript Security (LFS184), a new free training course now available through the Linux Foundation Training platform.

From vulnerability patching to release automation to better governance processes, here’s what’s been happening behind the scenes from January through June.

Join us at JSConf 2025 in Chesapeake Bay, MD October 14-16 to hear from javascript experts, community members and advocates.

It is with deep sadness that we mark the passing of Mikeal Rogers, a leader, builder, and advocate for open source communities and for the people who power them.

The OpenJS Foundation, providing vendor-neutral support for sustained growth within the open source JavaScript community, is excited to welcome Harper as our newest member.

OpenJS Foundation is now authorized to assign CVE identifiers for vulnerabilities found in open source JavaScript projects hosted by OpenJS.

From critical security updates to improved automation, policy updates, and major release planning, this post covers the highlights from March and April 2025.