Ulises Gascón

@ulisesgascon.com

662 Followers 270 Following

#OpenSource Maintainer (@nodejs.org, @expressjs.bsky.social, Lodash, Yeoman...), #TC39 Delegate and #Maker | He/Him

Screenshot of Newsletter #015 published on GitHub Sponsors, showing the title "A Break from Survival Mode" with a Published badge, the opening paragraph, the beginning of the "A New Chapter: Node.js AI Security Engineer in Residence" section, and the announcement graphic with the Alpha-Omega, OpenJS Foundation, and Node.js logos and a photo of Ulises Gascón holding a microphone.
Screenshot of Newsletter #014 published on GitHub Sponsors, showing the title "A Flood of Reports and a Fresh Coat of Paint" with a Published badge, the opening paragraph, the beginning of the "A New Look for Express" section, and a before-and-after screenshot of the redesigned Express website.
Screenshot of the GHSA Overview Grafana dashboard rendering the demo dataset. Multi-panel view showing advisory state distribution, severity breakdown, CVSS score histogram, CWE ranking, top reporters and repos, throughput over time, time-to-publish, and aging in triage and draft. Dark theme, ~250 fictional advisories across two demo orgs spread over two years.
Bar chart and table showing security advisory reports for Lodash and Express from March 2024 to March 2026. 120 total reports: 32 accepted (26.7%), 84 closed (70%), 4 pending (3.3%). Reports spike sharply in early 2026, reaching 40 in March 2026 alone, with only 7 accepted and 31 closed. Green bars represent accepted advisories, gray bars represent closed, and orange represents pending.
Screenshot of Newsletter #013 published on GitHub Sponsors, showing the title "Large Phishing Operations Against Maintainers" with a Published badge, the opening paragraph, the beginning of the Axios supply chain compromise section, and a screenshot of phishing emails received by the author.
Screenshot of Newsletter #012 published on GitHub Sponsors, showing the title "New Node.js Release Schedule, AI Stress-Testing Security & CVE Season" with a Published badge, the opening paragraph, and the beginning of the Node.js release schedule section with its timeline chart.
GitHub Publish advisory confirmation dialog warning that publishing will delete the temporary private fork. The only options are Delete fork and publish or Cancel.
libuv logo featuring a bright green unicorn dinosaur head with a spiraled horn, open mouth showing teeth, against a dark circular background, next to the word "libuv" in gray text
Screenshot of a GitHub Sponsors email update titled ‘Secure Publishing, Lodash Overhaul & Express Releases 🛡️.’ It shows the beginning of the newsletter: greeting, introduction, and the first section called ‘🎤 “Publishing JavaScript Securely in 2026”’ with a promotional image preview underneath.
Imagen de piezas de LEGO desordenadas con el texto “Publishing JavaScript Securely in 2026” y “by Ulises Gascón”, representando la complejidad y los riesgos de la cadena de suministro en el ecosistema JavaScript.
Screenshot of a GitHub Sponsors email update titled ‘Wrapping Up the Year with Talks, Security Work and Big Releases 🎁.’ It shows the beginning of the newsletter: greeting, introduction, and the first section called ‘What Comes After Chaos?’ with a YouTube embed preview underneath.
Fondo oscuro con trazos luminosos rojos, amarillos y azules que se entrecruzan, evocando movimiento y caos. En el centro, un recuadro blanco contiene el texto “What comes after Chaos?” y, debajo, otro recuadro más pequeño con “by Ulises Gascón”.
Fondo oscuro con trazos luminosos rojos, amarillos y azules que se entrecruzan, evocando movimiento y caos. En el centro, un recuadro blanco contiene el texto “What comes after Chaos?” y, debajo, otro recuadro más pequeño con “by Ulises Gascón”.
Screenshot of a GitHub Sponsors “Email updates” page showing a published update titled “Open Source Treats — Lodash, Yeoman & Express 🎃”. The message preview greets readers with “Hola everyone! 🎉” and mentions that October was full of open source treats, highlighting progress in Lodash, Yeoman, and Express. The page shows that the update has been published for 8 sponsor tiers.
Screenshot of the OWASP Foundation Online Voting dashboard. It shows that the user, Ulises Gascón, is logged in and has already voted in the '2025 OWASP WASPY Awards Election'. A green checkmark and the message 'Already voted' are displayed under 'Current ballots'.
📷 Fotografía de la caseta 365 de la Feria del Libro de Madrid, perteneciente a ARTCOMBO / SENTIR / MARCOMBO, donde está expuesto El gran libro de Node.js de Ulises Gascón. En la imagen, varias personas hojean libros y destaca la portada del libro con un aviso de "10% de descuento".
Ulises Gascón is showing off a custom-built futuristic robot during a livestream, combining his passion for open source and robotics in a fun and hands-on way.
A playful logo that reads "Express" in bold, stylized letters with cute Japanese katakana above it spelling "えくすぷれす" (express). A pastel train track loops around the text with colorful stars. Below, a yellow banner displays Japanese text reading "高速・革新的・最小限" meaning "High-speed, innovative, minimal." This is an alternate version of the Express logo.
A detailed 3D-rendered sculpture of a bearded man wearing a dark hoodie and glasses, styled in a Warhammer 40k aesthetic. He is depicted joyfully typing on a futuristic laptop with glowing green symbols, next to a large, rugged server tower adorned with mechanical details and the iconic Imperial Aquila emblem. The figure is mounted on a textured base, giving it a gritty, industrial feel.
A custom Magic: The Gathering card titled “Ulises, Guardian of the Forked Path.” The character is portrayed as a bearded man with glasses, wearing a cap labeled “JS.” He stands confidently on a forest path that forks into two directions, symbolizing decision-making in software. The card is a Legendary Creature — Human Developer with 3 power and 5 toughness. It features abilities like "Commit Mastery," "Open Source Advocate," and "Security Consultant" — all referencing coding, collaboration, and digital security. The flavor text reads: “Code is community; together, we build the future.”
The image is a screenshot of the GitHub Notifications page. The "Inbox" shows a total of 995 notifications
A Raspberry Pi-based ARM cluster hosted in the basement of one of the team members. The setup includes multiple Raspberry Pi boards neatly connected via network switches, with organized cabling and centralized power distribution.
A simple cartoon of a stick figure poking the ground with a stick, accompanied by the text: 'C'mon, do something...' Below the figure, the label reads: 'node-test-pull-request.'
The image is a screenshot of the GitHub Notifications page. The "Inbox" shows a total of 118 notifications
Ulises Gascón, smiling widely in a red shirt and headphones, proudly holds up his multi-layered robotic creation. Behind him is a Manhattan map on the wall and shelves filled with tech gadgets and pop culture figures (like 'This is fine' character), reflecting his passion for technology and open-source projects.