gRPC for Node.js provides client and server implementations for the gRPC framework, including a pure JavaScript option using the @grpc/grpc-js package (no C++ addon). It also includes supporting packages like @grpc/proto-loader for loading .proto files, grpc-tools for distributing protoc and the Node gRPC plugin, and health check and reflection services for gRPC servers.
Project status
- The grpc/grpc-node repository (gRPC for Node.js) appears actively maintained, with a last upstream push on 2026-06-17 and multiple recent @grpc/grpc-js updates in late May 2026, all within the last few months of 2026-08-12.
- The apparent update cadence is relatively active, with several @grpc/grpc-js updates clustered on 2026-05-20 (1.9.16, 1.13.5, 1.14.4), followed by an upstream activity point on 2026-06-17.
AI summary generated
Recent updates
@grpc/grpc-js@1.9.16
Release notes for @grpc/grpc-js 1.9.16 describe two security-related crash fixes involving malformed requests and malformed compressed messages. The code diff shows additional, substantial behavior changes around message decompression and max message size enforcement that are not mentioned in the release notes.
Security@grpc/grpc-js@1.13.5
grpc-js 1.13.5 contains fixes aimed at preventing crashes when the server or client receives malformed input, especially malformed compressed gRPC payloads. The code changes primarily add explicit zlib decompressor error handling and adjust where HTTP2 stream error events are caught to avoid uncaught error exceptions.
Security@grpc/grpc-js@1.14.4
grpc-js 1.14.4 includes two security-related fixes intended to prevent crashes when processing malformed requests and malformed compressed messages. The provided diff also shows additional functional changes outside the release notes, including new health-check RPC support and changes to default xDS experimental feature flags.
SecurityFeatures