Node.js

Workflow

1. Confirm Node.js runtime baseline and package manager strategy.
2. Define repository structure and module boundaries.
3. Select language/module approach (TypeScript vs JavaScript, ESM vs CJS).
4. Establish dependency and supply-chain controls.
5. Implement testing strategy and CI quality gates.
6. Harden runtime behavior for performance and resilience.
7. Apply OWASP-aligned security controls.
8. Ship with observability and operations runbooks.

Preflight (Ask / Check First)

• Target active Node LTS line and hosting/runtime constraints.
• Service shape: API, worker, CLI, or hybrid.
• Repo model: single package vs monorepo.
• Build tooling and transpilation requirements.
• Expected traffic, latency SLOs, and failure budgets.
• Security/compliance requirements for dependencies and secrets.