Node.js
Node.js is an open-source, cross-platform, JavaScript runtime environment.
For information on using Node.js, see the Node.js website.
The Node.js project uses an open governance model. The
OpenJS Foundation provides support for the project.
This project has a Code of Conduct.
Table of contents
Support
Looking for help? Check out the
instructions for getting support.
Release types
- Current: Under active development. Code for the Current release is in the
branch for its major version number (for example,
v15.x). Node.js releases a new
major version every 6 months, allowing for breaking changes. This happens in
April and October every year. Releases appearing each October have a support
life of 8 months. Releases appearing each April convert to LTS (see below)
each October.
- LTS: Releases that receive Long Term Support, with a focus on stability
and security. Every even-numbered major version will become an LTS release.
LTS releases receive 12 months of Active LTS support and a further 18 months
of Maintenance. LTS release lines have alphabetically-ordered code names,
beginning with v4 Argon. There are no breaking changes or feature additions,
except in some special circumstances.
- Nightly: Code from the Current branch built every 24-hours when there are
changes. Use with caution.
Current and LTS releases follow Semantic Versioning. A
member of the Release Team signs each Current and LTS release.
For more information, see the
Release README.
Download
Binaries, installers, and source tarballs are available at
https://nodejs.org/en/download/.
Current and LTS releases
https://nodejs.org/download/release/
The latest directory is an
alias for the latest Current release. The latest-codename directory is an
alias for the latest release from an LTS line. For example, the
latest-fermium directory
contains the latest Fermium (Node.js 14) release.
Nightly releases
https://nodejs.org/download/nightly/
Each directory name and filename contains a date (in UTC) and the commit
SHA at the HEAD of the release.
API documentation
Documentation for the latest Current release is at https://nodejs.org/api/.
Version-specific documentation is available in each release directory in the
docs subdirectory. Version-specific documentation is also at
https://nodejs.org/download/docs/.
Verifying binaries
Download directories contain a SHASUMS256.txt file with SHA checksums for the
files.
To download SHASUMS256.txt using curl:
$ curl -O https://nodejs.org/dist/vx.y.z/SHASUMS256.txt
To check that a downloaded file matches the checksum, run
it through sha256sum with a command such as:
$ grep node-vx.y.z.tar.gz SHASUMS256.txt | sha256sum -c -
For Current and LTS, the GPG detached signature of SHASUMS256.txt is in
SHASUMS256.txt.sig. You can use it with gpg to verify the integrity of
SHASUMS256.txt. You will first need to import
the GPG keys of individuals authorized to create releases. To
import the keys:
$ gpg --keyserver hkps://keys.openpgp.org --recv-keys DD8F2338BAE7501E3DD5AC78C273792F7D83545D
See the bottom of this README for a full script to import active release keys.
Next, download the SHASUMS256.txt.sig for the release:
$ curl -O https://nodejs.org/dist/vx.y.z/SHASUMS256.txt.sig
Then use gpg --verify SHASUMS256.txt.sig SHASUMS256.txt to verify
the file's signature.
Building Node.js
See BUILDING.md for instructions on how to build Node.js from
source and a list of supported platforms.
Security
For information on reporting security vulnerabilities in Node.js, see
SECURITY.md.
Contributing to Node.js
Current project team members
For information about the governance of the Node.js project, see
GOVERNANCE.md.
TSC (Technical Steering Committee)
Emeriti
### TSC emeriti
* [addaleax](https://github.com/addaleax) -
**Anna Henningsen** <> (she/her)
* [bnoordhuis](https://github.com/bnoordhuis) -
**Ben Noordhuis** <>
* [chrisdickinson](https://github.com/chrisdickinson) -
**Chris Dickinson** <>
* [codebytere](https://github.com/codebytere) -
**Shelley Vohr** <> (she/her)
* [danbev](https://github.com/danbev) -
**Daniel Bevenius** <> (he/him)
* [evanlucas](https://github.com/evanlucas) -
**Evan Lucas** <> (he/him)
* [Fishrock123](https://github.com/Fishrock123) -
**Jeremiah Senkpiel** <> (he/they)
* [gabrielschulhof](https://github.com/gabrielschulhof) -
**Gabriel Schulhof** <>
* [gibfahn](https://github.com/gibfahn) -
**Gibson Fahnestock** <> (he/him)
* [indutny](https://github.com/indutny) -
**Fedor Indutny** <>
* [isaacs](https://github.com/isaacs) -
**Isaac Z. Schlueter** <>
* [joshgav](https://github.com/joshgav) -
**Josh Gavant** <>
* [mscdex](https://github.com/mscdex) -
**Brian White** <>
* [nebrius](https://github.com/nebrius) -
**Bryan Hughes** <>
* [ofrobots](https://github.com/ofrobots) -
**Ali Ijaz Sheikh** <> (he/him)
* [orangemocha](https://github.com/orangemocha) -
**Alexis Campailla** <>
* [piscisaureus](https://github.com/piscisaureus) -
**Bert Belder** <>
* [rvagg](https://github.com/rvagg) -
**Rod Vagg** <>
* [sam-github](https://github.com/sam-github) -
**Sam Roberts** <>
* [shigeki](https://github.com/shigeki) -
**Shigeki Ohtsu** <> (he/him)
* [thefourtheye](https://github.com/thefourtheye) -
**Sakthipriyan Vairamani** <> (he/him)
* [TimothyGu](https://github.com/TimothyGu) -
**Tiancheng "Timothy" Gu** <> (he/him)
* [trevnorris](https://github.com/trevnorris) -
**Trevor Norris** <>
Collaborators
Emeriti
### Collaborator emeriti
* [andrasq](https://github.com/andrasq) -
**Andras** <>
* [AnnaMag](https://github.com/AnnaMag) -
**Anna M. Kedzierska** <>
* [AndreasMadsen](https://github.com/AndreasMadsen) -
**Andreas Madsen** <> (he/him)
* [aqrln](https://github.com/aqrln) -
**Alexey Orlenko** <> (he/him)
* [bmeurer](https://github.com/bmeurer) -
**Benedikt Meurer** <>
* [brendanashworth](https://github.com/brendanashworth) -
**Brendan Ashworth** <>
* [calvinmetcalf](https://github.com/calvinmetcalf) -
**Calvin Metcalf** <>
* [chrisdickinson](https://github.com/chrisdickinson) -
**Chris Dickinson** <>
* [claudiorodriguez](https://github.com/claudiorodriguez) -
**Claudio Rodriguez** <>
* [DavidCai1993](https://github.com/DavidCai1993) -
**David Cai** <> (he/him)
* [davisjam](https://github.com/davisjam) -
**Jamie Davis** <> (he/him)
* [digitalinfinity](https://github.com/digitalinfinity) -
**Hitesh Kanwathirtha** <> (he/him)
* [eljefedelrodeodeljefe](https://github.com/eljefedelrodeodeljefe) -
**Robert Jefe Lindstaedt** <>
* [estliberitas](https://github.com/estliberitas) -
**Alexander Makarenko** <>
* [eugeneo](https://github.com/eugeneo) -
**Eugene Ostroukhov** <>
* [firedfox](https://github.com/firedfox) -
**Daniel Wang** <>
* [Fishrock123](https://github.com/Fishrock123) -
**Jeremiah Senkpiel** <> (he/they)
* [gdams](https://github.com/gdams) -
**George Adams** <> (he/him)
* [geek](https://github.com/geek) -
**Wyatt Preul** <>
* [gibfahn](https://github.com/gibfahn) -
**Gibson Fahnestock** <> (he/him)
* [glentiki](https://github.com/glentiki) -
**Glen Keane** <> (he/him)
* [iarna](https://github.com/iarna) -
**Rebecca Turner** <>
* [imran-iq](https://github.com/imran-iq) -
**Imran Iqbal** <>
* [imyller](https://github.com/imyller) -
**Ilkka Myller** <>
* [isaacs](https://github.com/isaacs) -
**Isaac Z. Schlueter** <>
* [italoacasas](https://github.com/italoacasas) -
**Italo A. Casas** <> (he/him)
* [jasongin](https://github.com/jasongin) -
**Jason Ginchereau** <>
* [jbergstroem](https://github.com/jbergstroem) -
**Johan Bergström** <>
* [jdalton](https://github.com/jdalton) -
**John-David Dalton** <>
* [jhamhader](https://github.com/jhamhader) -
**Yuval Brik** <>
* [joaocgreis](https://github.com/joaocgreis) -
**João Reis** <>
* [joshgav](https://github.com/joshgav) -
**Josh Gavant** <>
* [julianduque](https://github.com/julianduque) -
**Julian Duque** <> (he/him)
* [kfarnung](https://github.com/kfarnung) -
**Kyle Farnung** <> (he/him)
* [kunalspathak](https://github.com/kunalspathak) -
**Kunal Pathak** <>
* [lance](https://github.com/lance) -
**Lance Ball** <> (he/him)
* [lucamaraschi](https://github.com/lucamaraschi) -
**Luca Maraschi** <> (he/him)
* [lxe](https://github.com/lxe) -
**Aleksey Smolenchuk** <>
* [maclover7](https://github.com/maclover7) -
**Jon Moss** <> (he/him)
* [mafintosh](https://github.com/mafintosh) -
**Mathias Buus** <> (he/him)
* [matthewloring](https://github.com/matthewloring) -
**Matthew Loring** <>
* [micnic](https://github.com/micnic) -
**Nicu Micleușanu** <> (he/him)
* [mikeal](https://github.com/mikeal) -
**Mikeal Rogers** <>
* [misterdjules](https://github.com/misterdjules) -
**Julien Gilli** <>
* [monsanto](https://github.com/monsanto) -
**Christopher Monsanto** <>
* [MoonBall](https://github.com/MoonBall) -
**Chen Gang** <>
* [not-an-aardvark](https://github.com/not-an-aardvark) -
**Teddy Katz** <> (he/him)
* [ofrobots](https://github.com/ofrobots) -
**Ali Ijaz Sheikh** <> (he/him)
* [Olegas](https://github.com/Olegas) -
**Oleg Elifantiev** <>
* [orangemocha](https://github.com/orangemocha) -
**Alexis Campailla** <>
* [othiym23](https://github.com/othiym23) -
**Forrest L Norvell** <> (they/them/themself)
* [petkaantonov](https://github.com/petkaantonov) -
**Petka Antonov** <>
* [phillipj](https://github.com/phillipj) -
**Phillip Johnsen** <>
* [piscisaureus](https://github.com/piscisaureus) -
**Bert Belder** <>
* [pmq20](https://github.com/pmq20) -
**Minqi Pan** <>
* [princejwesley](https://github.com/princejwesley) -
**Prince John Wesley** <>
* [psmarshall](https://github.com/psmarshall) -
**Peter Marshall** <> (he/him)
* [refack](https://github.com/refack) -
**Refael Ackermann (רפאל פלחי)** <> (he/him/הוא/אתה)
* [rlidwka](https://github.com/rlidwka) -
**Alex Kocharin** <>
* [rmg](https://github.com/rmg) -
**Ryan Graham** <>
* [robertkowalski](https://github.com/robertkowalski) -
**Robert Kowalski** <>
* [romankl](https://github.com/romankl) -
**Roman Klauke** <>
* [ronkorving](https://github.com/ronkorving) -
**Ron Korving** <>
* [RReverser](https://github.com/RReverser) -
**Ingvar Stepanyan** <>
* [rubys](https://github.com/rubys) -
**Sam Ruby** <>
* [saghul](https://github.com/saghul) -
**Saúl Ibarra Corretgé** <>
* [sam-github](https://github.com/sam-github) -
**Sam Roberts** <>
* [sebdeckers](https://github.com/sebdeckers) -
**Sebastiaan Deckers** <>
* [seishun](https://github.com/seishun) -
**Nikolai Vavilov** <>
* [shigeki](https://github.com/shigeki) -
**Shigeki Ohtsu** <> (he/him)
* [silverwind](https://github.com/silverwind) -
**Roman Reiss** <>
* [stefanmb](https://github.com/stefanmb) -
**Stefan Budeanu** <>
* [tellnes](https://github.com/tellnes) -
**Christian Tellnes** <>
* [thefourtheye](https://github.com/thefourtheye) -
**Sakthipriyan Vairamani** <> (he/him)
* [thlorenz](https://github.com/thlorenz) -
**Thorsten Lorenz** <>
* [trevnorris](https://github.com/trevnorris) -
**Trevor Norris** <>
* [tunniclm](https://github.com/tunniclm) -
**Mike Tunnicliffe** <>
* [vkurchatkin](https://github.com/vkurchatkin) -
**Vladimir Kurchatkin** <>
* [vsemozhetbyt](https://github.com/vsemozhetbyt) -
**Vse Mozhet Byt** <> (he/him)
* [watson](https://github.com/watson) -
**Thomas Watson** <>
* [whitlockjc](https://github.com/whitlockjc) -
**Jeremy Whitlock** <>
* [yhwang](https://github.com/yhwang) -
**Yihong Wang** <>
* [yorkie](https://github.com/yorkie) -
**Yorkie Liu** <>
Collaborators follow the Collaborator Guide in
maintaining the Node.js project.
Triagers
Release keys
Primary GPG keys for Node.js Releasers (some Releasers sign with subkeys):
To import the full set of trusted release keys (including subkeys possibly used
to sign releases):
gpg --keyserver hkps://keys.openpgp.org --recv-keys 4ED778F539E3634C779C87C6D7062848A1AB005C
gpg --keyserver hkps://keys.openpgp.org --recv-keys 141F07595B7B3FFE74309A937405533BE57C7D57
gpg --keyserver hkps://keys.openpgp.org --recv-keys 94AE36675C464D64BAFA68DD7434390BDBE9B9C5
gpg --keyserver hkps://keys.openpgp.org --recv-keys 74F12602B6F1C4E913FAA37AD3A89613643B6201
gpg --keyserver hkps://keys.openpgp.org --recv-keys 71DCFD284A79C3B38668286BC97EC7A07EDE3FC1
gpg --keyserver hkps://keys.openpgp.org --recv-keys 61FC681DFB92A079F1685E77973F295594EC4689
gpg --keyserver hkps://keys.openpgp.org --recv-keys 8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600
gpg --keyserver hkps://keys.openpgp.org --recv-keys C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8
gpg --keyserver hkps://keys.openpgp.org --recv-keys 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4
gpg --keyserver hkps://keys.openpgp.org --recv-keys C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C
gpg --keyserver hkps://keys.openpgp.org --recv-keys DD8F2338BAE7501E3DD5AC78C273792F7D83545D
gpg --keyserver hkps://keys.openpgp.org --recv-keys A48C2BEE680E841632CD4E44F07496B3EB3C1762
gpg --keyserver hkps://keys.openpgp.org --recv-keys 108F52B48DB57BB0CC439B2997B01419BD92F80A
gpg --keyserver hkps://keys.openpgp.org --recv-keys B9E2F5981AA6E0CD28160D9FF13993A75599653C
See the section above on Verifying binaries for how to
use these keys to verify a downloaded file.
Other keys used to sign some previous releases
* **Chris Dickinson** <>
`9554F04D7259F04124DE6B476D5A82AC7E37093B`
* **Danielle Adams** <>
`1C050899334244A8AF75E53792EF661D867B9DFA`
* **Evan Lucas** <>
`B9AE9905FFD7803F25714661B63B535A4C206CA9`
* **Gibson Fahnestock** <>
`77984A986EBC2AA786BC0F66B01FBB92821C587A`
* **Isaac Z. Schlueter** <>
`93C7E9E91B49E432C2F75674B0A78B0A6C481CF6`
* **Italo A. Casas** <>
`56730D5401028683275BD23C23EFEFE93C4CFFFE`
* **Jeremiah Senkpiel** <>
`FD3A5288F042B6850C66B31F09FE44734EB7990E`
* **Julien Gilli** <>
`114F43EE0176B71C7BC219DD50A3051F888C628D`
* **Timothy J Fontaine** <>
`7937DFD2AB06298B2293C3187D33FF9D0246406D`
Security release stewards
When possible, the commitment to take slots in the
security release steward rotation is made by companies in order
to ensure individuals who act as security stewards have the
support and recognition from their employer to be able to
prioritize security releases. Security release stewards manage security
releases on a rotation basis as outlined in the
security release process.
- Datadog
- NearForm
- Red Hat and IBM
License
Node.js is available under the
MIT license. Node.js also includes
external libraries that are available under a variety of licenses. See
LICENSE for the full
license text.