node-26 — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited node-26 (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Practical workflow for adopting Node.js 26 in real projects. Prefer official Node.js release notes and API docs for date-sensitive details because the v26 Current line can change quickly.
For API patterns, examples, and migration details, read references/node-26-upgrade-guide.md.
node --version, node -p "process.versions", package managerversion, CI images, Dockerfiles, .nvmrc, .node-version, mise, Volta, and package.json engines.
already on an LTS line, recommend waiting for the LTS handoff unless the user explicitly wants Current or needs a v26 feature.
rg -n "_stream_(readable|writable|duplex|transform|passthrough|wrap)|writeHeader\\(|--experimental-transform-types|module\\.register\\(|\\blocalStorage\\b" . rg -n "node-gyp|binding\\.gyp|node-addon-api|\\bnan\\b|prebuild|node-pre-gyp" package.json pnpm-lock.yaml package-lock.json yarn.lock .github Dockerfile* 2>/dev/nullTemporal for business dates, time zones, DST-sensitive scheduling,and removing date libraries when the runtime target is Node >= 26.
Map/WeakMap get-or-insert helpers for cache, grouping, counting,and object metadata patterns.
Iterator.concat for synchronous lazy iterable composition.key material.
type checks, linters, and a smoke test of startup plus key workflows.
rather than assuming compatibility.
Map.prototype.getOrInsertComputed() is synchronous. If the factory returnsa Promise, the Promise is stored; it is not awaited.
Iterator.concat() handles synchronous iterables. For streams, paginated APIclients, async cursors, or other async iterables, use an async generator.
Temporal has distinct types. Choose PlainDate, PlainDateTime,ZonedDateTime, or Instant based on the domain instead of translating every Date call mechanically.
localStorage no longer has a useful unconfigured in-memory fallback inNode.js 26. Current docs say accessing it without --localstorage-file throws a DOMException; configure persistence or avoid the global.
module.register() is runtime-deprecated. Do not blindly rewrite complexloader hooks; check the current node:module customization hooks docs.
NODE_MODULE_VERSION is 147 forNode.js 26.0.0.
commands to run.
improves the existing code.
a claim depends on the current release line.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.