
Research
Node.js Fixes AsyncLocalStorage Crash Bug That Could Take Down Production Servers
Node.js patched a crash bug where AsyncLocalStorage could cause stack overflows to bypass error handlers and terminate production servers.
Enables harmony features programmatically.
Enabling just the --harmony flag:
require("harmonize")();
Enabling specific features:
require("harmonize")([
"harmony",
"harmony_sharedarraybuffer"
]);
Note that unsupported flags are simply ignored.
var harmonize = require("harmonize");
// ^ Transparently spawns another node process with --v8-options and
// parses enabled and supported harmony flags. You can also inspect
// these: console.log(harmonize.enabled, harmonize.supported);
harmonize([ "harmony", ... ]);
// ^ Interrupts process flow within the parent and starts a new process
// with the harmony flags you provided.
// Everything below is executed within the harmonized child only.
While no code below the call to harmonize() is executed within the
parent, it must still be parseable without any additional flags.
For example, if you are enabling generators which aren't supported by
your node version without the respective flag, using generators syntax
within the main file will result in a parse error. In such cases, just
move code that requires a flag into a separate file and require it
instead, which will prevent the parse error.
License: BSD 3-Clause License
FAQs
Enables --harmony flags programmatically.
The npm package harmonize receives a total of 3,808 weekly downloads. As such, harmonize popularity was classified as popular.
We found that harmonize demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Node.js patched a crash bug where AsyncLocalStorage could cause stack overflows to bypass error handlers and terminate production servers.

Research
/Security News
A malicious Chrome extension steals newly created MEXC API keys, exfiltrates them to Telegram, and enables full account takeover with trading and withdrawal rights.

Security News
CVE disclosures hit a record 48,185 in 2025, driven largely by vulnerabilities in third-party WordPress plugins.