npm / tinypool
tinypool
What changed in tinypool 1 to 2, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-25.
2 breaking3 security11 new APIs and options1 performance3 behavior and defaults4 fixes and other
See which of these apply to your code, ranked, in your agent:
npx @unstale/cli inittinypool 27 changes
Breaking changes 1
Node 18 support was dropped, so projects using tinypool must use a supported Node.js version.
Security 3
Tinypool: Prototype Pollution Gadget to RCE in run() options
Guards the worker filename against prototype pollution.
Worker options are guarded against prototype pollution.
New APIs and options 1
Adds support for a serialization option when using the child_process runtime.
Performance 1
tinypool uses availableParallelism instead of exec to determine parallelism.
Behavior and default changes 1
The filename parameter now accepts a URL instance.
tinypool 117 changes
Breaking changes 1
Changes the error type to unknown.
New APIs and options 10
Passes argv to child_process.
Adds support for isolateWorkers, allowing workers to be isolated; fixes also address queue handling and respecting minThreads in this mode.
Adds maxMemoryLimitBeforeRecycle options.
Adds physical-core support.
Adds a method to cancel pending tasks.
Adds a method to recycle workers.
Destroys idle workers when the runtime changes.
Adds support for the runtime option.
Adds the terminateTimeout option.
Adds WorkerId.
Behavior and default changes 2
Thread limits can be fractional; for example, minThreads: 0.5 uses 50% of available cores.
Uses the internal workerId for the child_process runtime.
Fixes and other changes 4
Kills a stuck process with SIGKILL and prevents writing to a terminating process.
Prevents new workers from writing to a closed pool.
Cleans up async resources when destroying the pool.
Uses the .default export of a worker module when it exists.