Log inSign up
Liran Tal
78.1K posts
Image
user avatar
Liran Tal
@liran_tal
🧠 AI Security & securing agentic coding LLM w MCP serves šŸ¦„ Node.js Secure Coding 🌟 @GitHub Star šŸ… @OpenJS Pathfinder award for Security šŸ„‘ DevRel @snyksec
https://lirantal.com
nodejs-security.com
Joined November 2011
1,712
Following
13.3K
Followers
  • Pinned
    user avatar
    Liran Tal
    @liran_tal
    Nov 24, 2021
    OH WOWšŸ˜ I received the GitHub Stars Award 2021 🌟 Thank you so much @github and everyone for the support and the recognition This means so much to me ā¤ļø #OpenSource #GitHubStars
    GitHub Stars Award 2021 - "thank you for the tremendous work that you do in the community by inspiring educating and influencing all those around you" - recognizing Liran Tal
    Image
  • user avatar
    Liran Tal
    @liran_tal
    Nov 19, 2023
    Me and TypeScript every single time x.com/ciksgibiyim/st…
    488K
  • user avatar
    Liran Tal
    @liran_tal
    Oct 6, 2021
    Hands up if you were a Visual Basic coder! šŸ‘‹
    Image
  • user avatar
    Liran Tal
    @liran_tal
    Jan 19, 2023
    almost 2 decades of doing open source 🤯
    the commit contribution graph / timeline on GitHub for Liran Tal
    118K
  • user avatar
    Liran Tal
    @liran_tal
    Jun 16, 2024
    Rule #7 of SQL: Developers rejecting ORMs are doomed to end up building them
    user avatar
    Jarred Sumner
    Bun
    @jarredsumner
    Jun 16, 2024
    In the next version of Bun bun:sqlite supports query.as(Class) to attach methods & getters/setters to query results
    import { Database } from "bun:sqlite";

const db = new Database("my.db");
class Tweet {
  id: number;
  text: string;
  username: string;

  get isMe() {
    return this.username === "jarredsumner";
  }
}

const tweets = db
  .query("SELECT * FROM tweets")
  .as(Tweet);

for (const tweet of tweets.all()) {
  console.log("Me?", tweet.isMe);
}
    140K
  • user avatar
    Liran Tal
    @liran_tal
    Apr 29, 2024
    You're transferring way too much data over that cable
    141K
  • user avatar
    Liran Tal
    @liran_tal
    Oct 15, 2022
    hits in the feels
    Image
  • user avatar
    Liran Tal
    @liran_tal
    Jan 22, 2025
    Deno is Rust based, right? Goes to show that there's so much more involved than just "choosing Rust cause performance you know" šŸ¤·ā€ā™‚ļø
    user avatar
    Jarred Sumner
    Bun
    @jarredsumner
    Jan 22, 2025
    Running `select * from users limit 100` in batches of 100: Bun 1.2: 50k q/s Node 23.6.0: 14k q/s (postgres.js) Deno 2.1.6: 11k q/s (postgres.js)
    Load a huge table
Queries per second. 100 rows x 100 parallel queries

bun: 50,251 queries per second
50,251
node: 14,398 queries per second
14,398
deno: 11,821 queries per second
11,821
Bun
v1.2
Node.js
v23.6.0
Deno
v2.1.6
View benchmark
    132K
  • user avatar
    Liran Tal
    @liran_tal
    Jan 3, 2021
    So many blogs and tutorials showing poorly optimized and insecure ways of building Node.js docker images 😟 I'm putting together an optimal NodeJS Docker guideline 🐳 Step by step, explaining the rationale of Dockerfile directives āœ… Follow and stay tuned for more details
  • user avatar
    Liran Tal
    @liran_tal
    Apr 13, 2022
    I got recognized as a GitHub Star for 2022 ⭐😊 It means a lot to me and I'm thankful for being able to educate and inspire other developers about open source and developer security. Much gratitude to all of you who support and collaborate with me ā¤ļø And thank you, @GitHub.
    Image
  • user avatar
    Liran Tal
    @liran_tal
    Feb 3, 2023
    Who needs to skill up on their Node.js security skills? I have a freebie giveaway for ya šŸ˜‰šŸŽ Giving away my book: "Essential Node.js Security for Express" 1 Follow @liran_tal 2 Retweet, like or comment 3 I'll DM you a free download link for the book
    Hands-on and abundant with source code for a practical guide to Securing Node.js web applications.

Node.js Secure Code Guidelines
OWASP Essential Security Risks and Countermeasures
Express Hardening
Node.js and npm secure dependencies management
Understanding and securing HTTP Headers, NoSQL Injections, XSS, CSRF, Regex DoS, Sessions and more
    62K
  • user avatar
    Liran Tal
    @liran_tal
    Jan 13, 2021
    IT'S FINALLY RELEASED šŸ˜²šŸš€ Best practices to containerize Node.js web applications with Docker šŸ³šŸ™Œ āœ… A comprehensive step by step guide āœ… 10+ production-grade best practices āœ… Deploy NodeJS apps securely! šŸ‘‰ snyk.io/blog/10-best-p… @nodejs & @Docker security FTW
    Image
    10 best practices to containerize Node.js web applications with Docker | Snyk Blog | Snyk
    From snyk.io
  • user avatar
    Liran Tal
    @liran_tal
    Jul 19, 2021
    Here's a secret GitHub power tool Did you know that you can navigate and create directories from within the GitHub UI if you just terminate each file with a forward slash / ? 🤯 You're welcome :-)
    Image
    GIF
  • user avatar
    Liran Tal
    @liran_tal
    Apr 3, 2024
    šŸ‘‹šŸ˜ ANNOUNCING my new Node.js book! eval, new Function, the Node.js vm module? Nah, Start by adopting secure coding practices šŸ”® Learn how to avoid Code Injection in JavaScript šŸ“Œ May 15th, 2024 release šŸŽ PreOrder now at 70% discount!
    Node.js Secure Coding: Mitigate and Weaponize Code Injection Vulnerabilities
    Node.js Secure Coding: Mitigate and Weaponize Code Injection Vulnerabilities
    From nodejs-security.com
    76K

New to X?

Sign up now to get your own personalized timeline!

Create account

By signing up, you agree to the Terms of Service and Privacy Policy, including Cookie Use.

TermsĀ·PrivacyĀ·CookiesĀ·AccessibilityĀ·Ads InfoĀ·Ā© 2026 X Corp.
Don't miss what's happening
People on X are the first to know.
Log inSign up