Notable Changes: Deprecations and Removals: - (SEMVER-MAJOR) fs: runtime deprecate string coercion in `fs.write`, `fs.writeFileSync` (Livia Medeiros) (https://github.com/nodejs/node/pull/42607) - (SEMVER-MAJOR) dns: remove `dns.lookup` and `dnsPromises.lookup` options type coercion (Antoine du Hamel) (https://github.com/nodejs/node/pull/41431) - (SEMVER-MAJOR) process: runtime deprecate multipleResolves (Benjamin Gruenbaum) (https://github.com/nodejs/node/pull/41896) - (SEMVER-MAJOR) stream: remove thenable support (Robert Nagy) (https://github.com/nodejs/node/pull/40773) - (SEMVER-MAJOR) tls: move tls.parseCertString to end-of-life (Tobias Nießen) (https://github.com/nodejs/node/pull/41479) fetch (experimental): An experimental fetch API is available on the global scope by default. The implementation is based upon https://undici.nodejs.org/#/, an HTTP/1.1 client written for Node.js by contributors to the project. Through this addition, the following globals are made available: `fetch` , `FormData`, `Headers`, `Request`, `Response`. Disable this API with the `--no-experimental-fetch` command-line flag. Contributed by Michaël Zasso in https://github.com/nodejs/node/pull/41811. HTTP Timeouts: `server.headersTimeout`, which limits the amount of time the parser will wait to receive the complete HTTP headers, is now set to `60000` (60 seconds) by default. `server.requestTimeout`, which sets the timeout value in milliseconds for receiving the entire request from the client, is now set to `300000` (5 minutes) by default. If these timeouts expire, the server responds with status 408 without forwarding the request to the request listener and then closes the connection. Both timeouts must be set to a non-zero value to protect against potential Denial-of-Service attacks in case the server is deployed without a reverse proxy in front. Contributed by Paolo Insogna in https://github.com/nodejs/node/pull/41263. Test Runner module (experimental): The `node:test` module facilitates the creation of JavaScript tests that report results in TAP format. This module is only available under the `node:` scheme. Contributed by Colin Ihrig in https://github.com/nodejs/node/pull/42325. Toolchain and Compiler Upgrades: - Prebuilt binaries for Linux are now built on Red Hat Enterprise Linux (RHEL) 8 and are compatible with Linux distributions based on glibc 2.28 or later, for example, Debian 10, RHEL 8, Ubuntu 20.04. - Prebuilt binaries for macOS now require macOS 10.15 or later. - For AIX the minimum supported architecture has been raised from Power 7 to Power 8. Prebuilt binaries for 32-bit Windows will initially not be available due to issues building the V8 dependency in Node.js. We hope to restore 32-bit Windows binaries for Node.js 18 with a future V8 update. Node.js does not support running on operating systems that are no longer supported by their vendor. For operating systems where their vendor has planned to end support earlier than April 2025, such as Windows 8.1 (January 2023) and Windows Server 2012 R2 (October 2023), support for Node.js 18 will end at the earlier date. Full details about the supported toolchains and compilers are documented in the Node.js `BUILDING.md` file. Contributed by Richard Lau in https://github.com/nodejs/node/pull/42292, https://github.com/nodejs/node/pull/42604 and https://github.com/nodejs/node/pull/42659 , and Michaël Zasso in https://github.com/nodejs/node/pull/42105 and https://github.com/nodejs/node/pull/42666. V8 10.1: The V8 engine is updated to version 10.1, which is part of Chromium 101. Compared to the version included in Node.js 17.9.0, the following new features are included: - The `findLast` and `findLastIndex` array methods. - Improvements to the `Intl.Locale` API. - The `Intl.supportedValuesOf` function. - Improved performance of class fields and private class methods (the initialization of them is now as fast as ordinary property stores). The data format returned by the serialization API (`v8.serialize(value)`) has changed, and cannot be deserialized by earlier versions of Node.js. On the other hand, it is still possible to deserialize the previous format, as the API is backwards-compatible. Contributed by Michaël Zasso in https://github.com/nodejs/node/pull/42657. Web Streams API (experimental): Node.js now exposes the experimental implementation of the Web Streams API on the global scope. This means the following APIs are now globally available: - `ReadableStream`, `ReadableStreamDefaultReader`, `ReadableStreamBYOBReader`, `ReadableStreamBYOBRequest`, `ReadableByteStreamController`, `ReadableStreamDefaultController`, `TransformStream`, `TransformStreamDefaultController`, `WritableStream`, `WritableStreamDefaultWriter`, `WritableStreamDefaultController`, `ByteLengthQueuingStrategy`, `CountQueuingStrategy`, `TextEncoderStream`, `TextDecoderStream`, `CompressionStream`, `DecompressionStream`. Contributed James Snell in https://github.com/nodejs/node/pull/39062, and Antoine du Hamel in https://github.com/nodejs/node/pull/42225. Other Notable Changes: - (SEMVER-MAJOR) buffer: expose Blob as a global (James M Snell) (https://github.com/nodejs/node/pull/41270) - (SEMVER-MAJOR) child\_process: improve argument validation (Rich Trott) (https://github.com/nodejs/node/pull/41305) - doc: add RafaelGSS to collaborators (RafaelGSS) (https://github.com/nodejs/node/pull/42718) - (SEMVER-MAJOR) http: make TCP noDelay enabled by default (Paolo Insogna) (https://github.com/nodejs/node/pull/42163) - (SEMVER-MAJOR) net: make `server.address()` return an integer for `family` (Antoine du Hamel) (https://github.com/nodejs/node/pull/41431) - (SEMVER-MAJOR) worker: expose BroadcastChannel as a global (James M Snell) (https://github.com/nodejs/node/pull/41271) - (SEMVER-MAJOR) worker: graduate BroadcastChannel to supported (James M Snell) (https://github.com/nodejs/node/pull/41271) Semver-Major Commits: - (SEMVER-MAJOR) assert,util: compare RegExp.lastIndex while using deep equal checks (Ruben Bridgewater) (https://github.com/nodejs/node/pull/41020) - (SEMVER-MAJOR) buffer: refactor `byteLength` to remove outdated optimizations (Rongjian Zhang) (https://github.com/nodejs/node/pull/38545) - (SEMVER-MAJOR) buffer: expose Blob as a global (James M Snell) (https://github.com/nodejs/node/pull/41270) - (SEMVER-MAJOR) buffer: graduate Blob from experimental (James M Snell) (https://github.com/nodejs/node/pull/41270) - (SEMVER-MAJOR) build: make x86 Windows support temporarily experimental (Michaël Zasso) (https://github.com/nodejs/node/pull/42666) - (SEMVER-MAJOR) build: bump macOS deployment target to 10.15 (Richard Lau) (https://github.com/nodejs/node/pull/42292) - (SEMVER-MAJOR) build: downgrade Windows 8.1 and server 2012 R2 to experimental (Michaël Zasso) (https://github.com/nodejs/node/pull/42105) - (SEMVER-MAJOR) child\_process: improve argument validation (Rich Trott) (https://github.com/nodejs/node/pull/41305) - (SEMVER-MAJOR) cluster: make `kill` to be just `process.kill` (Bar Admoni) (https://github.com/nodejs/node/pull/34312) - (SEMVER-MAJOR) crypto: cleanup validation (Mohammed Keyvanzadeh) (https://github.com/nodejs/node/pull/39841) - (SEMVER-MAJOR) crypto: prettify othername in PrintGeneralName (Tobias Nießen) (https://github.com/nodejs/node/pull/42123) - (SEMVER-MAJOR) crypto: fix X509Certificate toLegacyObject (Tobias Nießen) (https://github.com/nodejs/node/pull/42124) - (SEMVER-MAJOR) crypto: use RFC2253 format in PrintGeneralName (Tobias Nießen) (https://github.com/nodejs/node/pull/42002) - (SEMVER-MAJOR) crypto: change default check(Host|Email) behavior (Tobias Nießen) (https://github.com/nodejs/node/pull/41600) - (SEMVER-MAJOR) deps: V8: cherry-pick semver-major commits from 10.2 (Michaël Zasso) (https://github.com/nodejs/node/pull/42657) - (SEMVER-MAJOR) deps: update V8 to 10.1.124.6 (Michaël Zasso) (https://github.com/nodejs/node/pull/42657) - (SEMVER-MAJOR) deps: update V8 to 9.8.177.9 (Michaël Zasso) (https://github.com/nodejs/node/pull/41610) - (SEMVER-MAJOR) deps: update V8 to 9.7.106.18 (Michaël Zasso) (https://github.com/nodejs/node/pull/40907) - (SEMVER-MAJOR) dns: remove `dns.lookup` and `dnsPromises.lookup` options type coercion (Antoine du Hamel) (https://github.com/nodejs/node/pull/41431) - (SEMVER-MAJOR) doc: update minimum glibc requirements for Linux (Richard Lau) (https://github.com/nodejs/node/pull/42659) - (SEMVER-MAJOR) doc: update AIX minimum supported arch (Richard Lau) (https://github.com/nodejs/node/pull/42604) - (SEMVER-MAJOR) fs: runtime deprecate string coercion in `fs.write`, `fs.writeFileSync` (Livia Medeiros) (https://github.com/nodejs/node/pull/42607) - (SEMVER-MAJOR) http: refactor headersTimeout and requestTimeout logic (Paolo Insogna) (https://github.com/nodejs/node/pull/41263) - (SEMVER-MAJOR) http: make TCP noDelay enabled by default (Paolo Insogna) (https://github.com/nodejs/node/pull/42163) - (SEMVER-MAJOR) lib: enable fetch by default (Michaël Zasso) (https://github.com/nodejs/node/pull/41811) - (SEMVER-MAJOR) lib: replace validator and error (Mohammed Keyvanzadeh) (https://github.com/nodejs/node/pull/41678) - (SEMVER-MAJOR) module,repl: support 'node:'-only core modules (Colin Ihrig) (https://github.com/nodejs/node/pull/42325) - (SEMVER-MAJOR) net: make `server.address()` return an integer for `family` (Antoine du Hamel) (https://github.com/nodejs/node/pull/41431) - (SEMVER-MAJOR) process: disallow some uses of Object.defineProperty() on process.env (Himself65) (https://github.com/nodejs/node/pull/28006) - (SEMVER-MAJOR) process: runtime deprecate multipleResolves (Benjamin Gruenbaum) (https://github.com/nodejs/node/pull/41896) - (SEMVER-MAJOR) readline: fix question still called after closed (Xuguang Mei) (https://github.com/nodejs/node/pull/42464) - (SEMVER-MAJOR) stream: remove thenable support (Robert Nagy) (https://github.com/nodejs/node/pull/40773) - (SEMVER-MAJOR) stream: expose web streams globals, remove runtime experimental warning (Antoine du Hamel) (https://github.com/nodejs/node/pull/42225) - (SEMVER-MAJOR) stream: need to cleanup event listeners if last stream is readable (Xuguang Mei) (https://github.com/nodejs/node/pull/41954) - (SEMVER-MAJOR) stream: revert revert `map` spec compliance (Benjamin Gruenbaum) (https://github.com/nodejs/node/pull/41933) - (SEMVER-MAJOR) stream: throw invalid arg type from End Of Stream (Jithil P Ponnan) (https://github.com/nodejs/node/pull/41766) - (SEMVER-MAJOR) stream: don't emit finish after destroy (Robert Nagy) (https://github.com/nodejs/node/pull/40852) - (SEMVER-MAJOR) stream: add errored and closed props (Robert Nagy) (https://github.com/nodejs/node/pull/40696) - (SEMVER-MAJOR) test: add initial test module (Colin Ihrig) (https://github.com/nodejs/node/pull/42325) - (SEMVER-MAJOR) timers: refactor internal classes to ES2015 syntax (Rabbit) (https://github.com/nodejs/node/pull/37408) - (SEMVER-MAJOR) tls: represent registeredID numerically always (Tobias Nießen) (https://github.com/nodejs/node/pull/41561) - (SEMVER-MAJOR) tls: move tls.parseCertString to end-of-life (Tobias Nießen) (https://github.com/nodejs/node/pull/41479) - (SEMVER-MAJOR) url: throw on NULL in IPv6 hostname (Rich Trott) (https://github.com/nodejs/node/pull/42313) - (SEMVER-MAJOR) v8: make v8.writeHeapSnapshot() error codes consistent (Darshan Sen) (https://github.com/nodejs/node/pull/42577) - (SEMVER-MAJOR) v8: make writeHeapSnapshot throw if fopen fails (Antonio Román) (https://github.com/nodejs/node/pull/41373) - (SEMVER-MAJOR) worker: expose BroadcastChannel as a global (James M Snell) (https://github.com/nodejs/node/pull/41271) - (SEMVER-MAJOR) worker: graduate BroadcastChannel to supported (James M Snell) (https://github.com/nodejs/node/pull/41271) PR-URL: https://github.com/nodejs/node/pull/42262
Node.js
Node.js is an open-source, cross-platform, JavaScript runtime environment.
For information on using Node.js, see the Node.js website.
The Node.js project uses an open governance model. The OpenJS Foundation provides support for the project.
This project has a Code of Conduct.
Table of contents
- Support
- Release types
- Building Node.js
- Security
- Contributing to Node.js
- Current project team members
- License
Support
Looking for help? Check out the instructions for getting support.
Release types
- Current: Under active development. Code for the Current release is in the branch for its major version number (for example, v15.x). Node.js releases a new major version every 6 months, allowing for breaking changes. This happens in April and October every year. Releases appearing each October have a support life of 8 months. Releases appearing each April convert to LTS (see below) each October.
- LTS: Releases that receive Long Term Support, with a focus on stability and security. Every even-numbered major version will become an LTS release. LTS releases receive 12 months of Active LTS support and a further 18 months of Maintenance. LTS release lines have alphabetically-ordered code names, beginning with v4 Argon. There are no breaking changes or feature additions, except in some special circumstances.
- Nightly: Code from the Current branch built every 24-hours when there are changes. Use with caution.
Current and LTS releases follow semantic versioning. A member of the Release Team signs each Current and LTS release. For more information, see the Release README.
Download
Binaries, installers, and source tarballs are available at https://nodejs.org/en/download/.
Current and LTS releases
https://nodejs.org/download/release/
The latest directory is an alias for the latest Current release. The latest-codename directory is an alias for the latest release from an LTS line. For example, the latest-fermium directory contains the latest Fermium (Node.js 14) release.
Nightly releases
https://nodejs.org/download/nightly/
Each directory name and filename contains a date (in UTC) and the commit SHA at the HEAD of the release.
API documentation
Documentation for the latest Current release is at https://nodejs.org/api/. Version-specific documentation is available in each release directory in the docs subdirectory. Version-specific documentation is also at https://nodejs.org/download/docs/.
Verifying binaries
Download directories contain a SHASUMS256.txt file with SHA checksums for the
files.
To download SHASUMS256.txt using curl:
$ curl -O https://nodejs.org/dist/vx.y.z/SHASUMS256.txt
To check that a downloaded file matches the checksum, run
it through sha256sum with a command such as:
$ grep node-vx.y.z.tar.gz SHASUMS256.txt | sha256sum -c -
For Current and LTS, the GPG detached signature of SHASUMS256.txt is in
SHASUMS256.txt.sig. You can use it with gpg to verify the integrity of
SHASUMS256.txt. You will first need to import
the GPG keys of individuals authorized to create releases. To
import the keys:
$ gpg --keyserver hkps://keys.openpgp.org --recv-keys DD8F2338BAE7501E3DD5AC78C273792F7D83545D
See Release keys for a script to import active release keys.
Next, download the SHASUMS256.txt.sig for the release:
$ curl -O https://nodejs.org/dist/vx.y.z/SHASUMS256.txt.sig
Then use gpg --verify SHASUMS256.txt.sig SHASUMS256.txt to verify
the file's signature.
Building Node.js
See BUILDING.md for instructions on how to build Node.js from source and a list of supported platforms.
Security
For information on reporting security vulnerabilities in Node.js, see SECURITY.md.
Contributing to Node.js
- Contributing to the project
- Working Groups
- Strategic initiatives
- Technical values and prioritization
Current project team members
For information about the governance of the Node.js project, see GOVERNANCE.md.
TSC (Technical Steering Committee)
- aduh95 - Antoine du Hamel <duhamelantoine1995@gmail.com> (he/him)
- apapirovski - Anatoli Papirovski <apapirovski@mac.com> (he/him)
- BethGriggs - Beth Griggs <bgriggs@redhat.com> (she/her)
- BridgeAR - Ruben Bridgewater <ruben@bridgewater.de> (he/him)
- ChALkeR - Сковорода Никита Андреевич <chalkerx@gmail.com> (he/him)
- cjihrig - Colin Ihrig <cjihrig@gmail.com> (he/him)
- danielleadams - Danielle Adams <adamzdanielle@gmail.com> (she/her)
- fhinkel - Franziska Hinkelmann <franziska.hinkelmann@gmail.com> (she/her)
- gireeshpunathil - Gireesh Punathil <gpunathi@in.ibm.com> (he/him)
- jasnell - James M Snell <jasnell@gmail.com> (he/him)
- joyeecheung - Joyee Cheung <joyeec9h3@gmail.com> (she/her)
- mcollina - Matteo Collina <matteo.collina@gmail.com> (he/him)
- mhdawson - Michael Dawson <midawson@redhat.com> (he/him)
- MylesBorins - Myles Borins <myles.borins@gmail.com> (he/him)
- RaisinTen - Darshan Sen <raisinten@gmail.com> (he/him)
- richardlau - Richard Lau <rlau@redhat.com>
- ronag - Robert Nagy <ronagy@icloud.com>
- targos - Michaël Zasso <targos@protonmail.com> (he/him)
- tniessen - Tobias Nießen <tniessen@tnie.de> (he/him)
- Trott - Rich Trott <rtrott@gmail.com> (he/him)
Emeriti
TSC emeriti
- addaleax - Anna Henningsen <anna@addaleax.net> (she/her)
- bnoordhuis - Ben Noordhuis <info@bnoordhuis.nl>
- chrisdickinson - Chris Dickinson <christopher.s.dickinson@gmail.com>
- codebytere - Shelley Vohr <shelley.vohr@gmail.com> (she/her)
- danbev - Daniel Bevenius <daniel.bevenius@gmail.com> (he/him)
- evanlucas - Evan Lucas <evanlucas@me.com> (he/him)
- Fishrock123 - Jeremiah Senkpiel <fishrock123@rocketmail.com> (he/they)
- gabrielschulhof - Gabriel Schulhof <gabrielschulhof@gmail.com>
- gibfahn - Gibson Fahnestock <gibfahn@gmail.com> (he/him)
- indutny - Fedor Indutny <fedor@indutny.com>
- isaacs - Isaac Z. Schlueter <i@izs.me>
- joshgav - Josh Gavant <josh.gavant@outlook.com>
- mmarchini - Mary Marchini <oss@mmarchini.me> (she/her)
- mscdex - Brian White <mscdex@mscdex.net>
- nebrius - Bryan Hughes <bryan@nebri.us>
- ofrobots - Ali Ijaz Sheikh <ofrobots@google.com> (he/him)
- orangemocha - Alexis Campailla <orangemocha@nodejs.org>
- piscisaureus - Bert Belder <bertbelder@gmail.com>
- rvagg - Rod Vagg <r@va.gg>
- sam-github - Sam Roberts <vieuxtech@gmail.com>
- shigeki - Shigeki Ohtsu <ohtsu@ohtsu.org> (he/him)
- thefourtheye - Sakthipriyan Vairamani <thechargingvolcano@gmail.com> (he/him)
- TimothyGu - Tiancheng "Timothy" Gu <timothygu99@gmail.com> (he/him)
- trevnorris - Trevor Norris <trev.norris@gmail.com>
Collaborators
- addaleax - Anna Henningsen <anna@addaleax.net> (she/her)
- aduh95 - Antoine du Hamel <duhamelantoine1995@gmail.com> (he/him)
- ak239 - Aleksei Koziatinskii <ak239spb@gmail.com>
- antsmartian - Anto Aravinth <anto.aravinth.cse@gmail.com> (he/him)
- apapirovski - Anatoli Papirovski <apapirovski@mac.com> (he/him)
- AshCripps - Ash Cripps <acripps@redhat.com>
- Ayase-252 - Qingyu Deng <i@ayase-lab.com>
- bcoe - Ben Coe <bencoe@gmail.com> (he/him)
- bengl - Bryan English <bryan@bryanenglish.com> (he/him)
- benjamingr - Benjamin Gruenbaum <benjamingr@gmail.com>
- BethGriggs - Beth Griggs <bgriggs@redhat.com> (she/her)
- bmeck - Bradley Farias <bradley.meck@gmail.com>
- bnb - Tierney Cyren <hello@bnb.im> (they/he)
- bnoordhuis - Ben Noordhuis <info@bnoordhuis.nl>
- BridgeAR - Ruben Bridgewater <ruben@bridgewater.de> (he/him)
- bzoz - Bartosz Sosnowski <bartosz@janeasystems.com>
- cclauss - Christian Clauss <cclauss@me.com> (he/him)
- ChALkeR - Сковорода Никита Андреевич <chalkerx@gmail.com> (he/him)
- cjihrig - Colin Ihrig <cjihrig@gmail.com> (he/him)
- codebytere - Shelley Vohr <shelley.vohr@gmail.com> (she/her)
- danbev - Daniel Bevenius <daniel.bevenius@gmail.com> (he/him)
- danielleadams - Danielle Adams <adamzdanielle@gmail.com> (she/her)
- devnexen - David Carlier <devnexen@gmail.com>
- devsnek - Gus Caplan <me@gus.host> (they/them)
- dmabupt - Xu Meng <dmabupt@gmail.com> (he/him)
- dnlup Daniele Belardi <dwon.dnl@gmail.com> (he/him)
- edsadr - Adrian Estrada <edsadr@gmail.com> (he/him)
- evanlucas - Evan Lucas <evanlucas@me.com> (he/him)
- fhinkel - Franziska Hinkelmann <franziska.hinkelmann@gmail.com> (she/her)
- Flarna - Gerhard Stöbich <deb2001-github@yahoo.de> (he/they)
- gabrielschulhof - Gabriel Schulhof <gabrielschulhof@gmail.com>
- gengjiawen - Jiawen Geng <technicalcute@gmail.com>
- GeoffreyBooth - Geoffrey Booth <webadmin@geoffreybooth.com> (he/him)
- gireeshpunathil - Gireesh Punathil <gpunathi@in.ibm.com> (he/him)
- guybedford - Guy Bedford <guybedford@gmail.com> (he/him)
- HarshithaKP - Harshitha K P <harshitha014@gmail.com> (she/her)
- himself65 - Zeyu Yang <himself65@outlook.com> (he/him)
- hiroppy - Yuta Hiroto <hello@hiroppy.me> (he/him)
- iansu - Ian Sutherland <ian@iansutherland.ca>
- indutny - Fedor Indutny <fedor@indutny.com>
- JacksonTian - Jackson Tian <shyvo1987@gmail.com>
- JakobJingleheimer - Jacob Smith <jacob@frende.me> (he/him)
- jasnell - James M Snell <jasnell@gmail.com> (he/him)
- jkrems - Jan Krems <jan.krems@gmail.com> (he/him)
- joesepi - Joe Sepi <sepi@joesepi.com> (he/him)
- joyeecheung - Joyee Cheung <joyeec9h3@gmail.com> (she/her)
- juanarbol - Juan José Arboleda <soyjuanarbol@gmail.com> (he/him)
- JungMinu - Minwoo Jung <nodecorelab@gmail.com> (he/him)
- legendecas - Chengzhong Wu <legendecas@gmail.com> (he/him)
- Leko - Shingo Inoue <leko.noor@gmail.com> (he/him)
- linkgoron - Nitzan Uziely <linkgoron@gmail.com>
- lpinca - Luigi Pinca <luigipinca@gmail.com> (he/him)
- lundibundi - Denys Otrishko <shishugi@gmail.com> (he/him)
- Lxxyx - Zijian Liu <lxxyxzj@gmail.com> (he/him)
- marsonya - Akhil Marsonya <akhil.marsonya27@gmail.com> (he/him)
- mcollina - Matteo Collina <matteo.collina@gmail.com> (he/him)
- meixg - Xuguang Mei <meixuguang@gmail.com> (he/him)
- Mesteery - Mestery <mestery@protonmail.com> (he/him)
- mhdawson - Michael Dawson <midawson@redhat.com> (he/him)
- miladfarca - Milad Fa <mfarazma@redhat.com> (he/him)
- mildsunrise - Alba Mendez <me@alba.sh> (she/her)
- mscdex - Brian White <mscdex@mscdex.net>
- MylesBorins - Myles Borins <myles.borins@gmail.com> (he/him)
- oyyd - Ouyang Yadong <oyydoibh@gmail.com> (he/him)
- panva - Filip Skokan <panva.ip@gmail.com>
- PoojaDurgad - Pooja D P <Pooja.D.P@ibm.com> (she/her)
- puzpuzpuz - Andrey Pechkurov <apechkurov@gmail.com> (he/him)
- Qard - Stephen Belanger <admin@stephenbelanger.com> (he/him)
- RafaelGSS - Rafael Gonzaga <rafael.nunu@hotmail.com> (he/him)
- RaisinTen - Darshan Sen <raisinten@gmail.com> (he/him)
- rexagod - Pranshu Srivastava <rexagod@gmail.com> (he/him)
- richardlau - Richard Lau <rlau@redhat.com>
- rickyes - Ricky Zhou <0x19951125@gmail.com> (he/him)
- ronag - Robert Nagy <ronagy@icloud.com>
- ruyadorno - Ruy Adorno <ruyadorno@github.com> (he/him)
- rvagg - Rod Vagg <rod@vagg.org>
- ryzokuken - Ujjwal Sharma <ryzokuken@disroot.org> (he/him)
- santigimeno - Santiago Gimeno <santiago.gimeno@gmail.com>
- shisama - Masashi Hirano <shisama07@gmail.com> (he/him)
- ShogunPanda - Paolo Insogna <paolo@cowtech.it> (he/him)
- srl295 - Steven R Loomis <srloomis@us.ibm.com>
- starkwang - Weijia Wang <starkwang@126.com>
- sxa - Stewart X Addison <sxa@redhat.com> (he/him)
- targos - Michaël Zasso <targos@protonmail.com> (he/him)
- TimothyGu - Tiancheng "Timothy" Gu <timothygu99@gmail.com> (he/him)
- tniessen - Tobias Nießen <tniessen@tnie.de> (he/him)
- trivikr - Trivikram Kamat <trivikr.dev@gmail.com>
- Trott - Rich Trott <rtrott@gmail.com> (he/him)
- vdeturckheim - Vladimir de Turckheim <vlad2t@hotmail.com> (he/him)
- VoltrexMaster - Mohammed Keyvanzadeh <mohammadkeyvanzade94@gmail.com> (he/him)
- watilde - Daijiro Wachi <daijiro.wachi@gmail.com> (he/him)
- XadillaX - Khaidi Chu <i@2333.moe> (he/him)
- yashLadha - Yash Ladha <yash@yashladha.in> (he/him)
- yosuke-furukawa - Yosuke Furukawa <yosuke.furukawa@gmail.com>
- ZYSzys - Yongsheng Zhang <zyszys98@gmail.com> (he/him)
Emeriti
Collaborator emeriti
- andrasq - Andras <andras@kinvey.com>
- AnnaMag - Anna M. Kedzierska <anna.m.kedzierska@gmail.com>
- AndreasMadsen - Andreas Madsen <amwebdk@gmail.com> (he/him)
- aqrln - Alexey Orlenko <eaglexrlnk@gmail.com> (he/him)
- bmeurer - Benedikt Meurer <benedikt.meurer@gmail.com>
- boneskull - Christopher Hiller <boneskull@boneskull.com> (he/him)
- brendanashworth - Brendan Ashworth <brendan.ashworth@me.com>
- calvinmetcalf - Calvin Metcalf <calvin.metcalf@gmail.com>
- chrisdickinson - Chris Dickinson <christopher.s.dickinson@gmail.com>
- claudiorodriguez - Claudio Rodriguez <cjrodr@yahoo.com>
- DavidCai1993 - David Cai <davidcai1993@yahoo.com> (he/him)
- davisjam - Jamie Davis <davisjam@vt.edu> (he/him)
- digitalinfinity - Hitesh Kanwathirtha <digitalinfinity@gmail.com> (he/him)
- eljefedelrodeodeljefe - Robert Jefe Lindstaedt <robert.lindstaedt@gmail.com>
- estliberitas - Alexander Makarenko <estliberitas@gmail.com>
- eugeneo - Eugene Ostroukhov <eostroukhov@google.com>
- firedfox - Daniel Wang <wangyang0123@gmail.com>
- Fishrock123 - Jeremiah Senkpiel <fishrock123@rocketmail.com> (he/they)
- gdams - George Adams <gadams@microsoft.com> (he/him)
- geek - Wyatt Preul <wpreul@gmail.com>
- gibfahn - Gibson Fahnestock <gibfahn@gmail.com> (he/him)
- glentiki - Glen Keane <glenkeane.94@gmail.com> (he/him)
- hashseed - Yang Guo <yangguo@chromium.org> (he/him)
- iarna - Rebecca Turner <me@re-becca.org>
- imran-iq - Imran Iqbal <imran@imraniqbal.org>
- imyller - Ilkka Myller <ilkka.myller@nodefield.com>
- isaacs - Isaac Z. Schlueter <i@izs.me>
- italoacasas - Italo A. Casas <me@italoacasas.com> (he/him)
- jasongin - Jason Ginchereau <jasongin@microsoft.com>
- jbergstroem - Johan Bergström <bugs@bergstroem.nu>
- jdalton - John-David Dalton <john.david.dalton@gmail.com>
- jhamhader - Yuval Brik <yuval@brik.org.il>
- joaocgreis - João Reis <reis@janeasystems.com>
- joshgav - Josh Gavant <josh.gavant@outlook.com>
- julianduque - Julian Duque <julianduquej@gmail.com> (he/him)
- kfarnung - Kyle Farnung <kfarnung@microsoft.com> (he/him)
- kunalspathak - Kunal Pathak <kunal.pathak@microsoft.com>
- lance - Lance Ball <lball@redhat.com> (he/him)
- lucamaraschi - Luca Maraschi <luca.maraschi@gmail.com> (he/him)
- lxe - Aleksey Smolenchuk <lxe@lxe.co>
- maclover7 - Jon Moss <me@jonathanmoss.me> (he/him)
- mafintosh - Mathias Buus <mathiasbuus@gmail.com> (he/him)
- matthewloring - Matthew Loring <mattloring@google.com>
- micnic - Nicu Micleușanu <micnic90@gmail.com> (he/him)
- mikeal - Mikeal Rogers <mikeal.rogers@gmail.com>
- misterdjules - Julien Gilli <jgilli@netflix.com>
- mmarchini - Mary Marchini <oss@mmarchini.me> (she/her)
- monsanto - Christopher Monsanto <chris@monsan.to>
- MoonBall - Chen Gang <gangc.cxy@foxmail.com>
- not-an-aardvark - Teddy Katz <teddy.katz@gmail.com> (he/him)
- ofrobots - Ali Ijaz Sheikh <ofrobots@google.com> (he/him)
- Olegas - Oleg Elifantiev <oleg@elifantiev.ru>
- orangemocha - Alexis Campailla <orangemocha@nodejs.org>
- othiym23 - Forrest L Norvell <ogd@aoaioxxysz.net> (they/them/themself)
- petkaantonov - Petka Antonov <petka_antonov@hotmail.com>
- phillipj - Phillip Johnsen <johphi@gmail.com>
- piscisaureus - Bert Belder <bertbelder@gmail.com>
- pmq20 - Minqi Pan <pmq2001@gmail.com>
- princejwesley - Prince John Wesley <princejohnwesley@gmail.com>
- psmarshall - Peter Marshall <petermarshall@chromium.org> (he/him)
- refack - Refael Ackermann (רפאל פלחי) <refack@gmail.com> (he/him/הוא/אתה)
- rlidwka - Alex Kocharin <alex@kocharin.ru>
- rmg - Ryan Graham <r.m.graham@gmail.com>
- robertkowalski - Robert Kowalski <rok@kowalski.gd>
- romankl - Roman Klauke <romaaan.git@gmail.com>
- ronkorving - Ron Korving <ron@ronkorving.nl>
- RReverser - Ingvar Stepanyan <me@rreverser.com>
- rubys - Sam Ruby <rubys@intertwingly.net>
- saghul - Saúl Ibarra Corretgé <s@saghul.net>
- sam-github - Sam Roberts <vieuxtech@gmail.com>
- sebdeckers - Sebastiaan Deckers <sebdeckers83@gmail.com>
- seishun - Nikolai Vavilov <vvnicholas@gmail.com>
- shigeki - Shigeki Ohtsu <ohtsu@ohtsu.org> (he/him)
- silverwind - Roman Reiss <me@silverwind.io>
- stefanmb - Stefan Budeanu <stefan@budeanu.com>
- tellnes - Christian Tellnes <christian@tellnes.no>
- thefourtheye - Sakthipriyan Vairamani <thechargingvolcano@gmail.com> (he/him)
- thlorenz - Thorsten Lorenz <thlorenz@gmx.de>
- trevnorris - Trevor Norris <trev.norris@gmail.com>
- tunniclm - Mike Tunnicliffe <m.j.tunnicliffe@gmail.com>
- vkurchatkin - Vladimir Kurchatkin <vladimir.kurchatkin@gmail.com>
- vsemozhetbyt - Vse Mozhet Byt <vsemozhetbyt@gmail.com> (he/him)
- watson - Thomas Watson <w@tson.dk>
- whitlockjc - Jeremy Whitlock <jwhitlock@apache.org>
- yhwang - Yihong Wang <yh.wang@ibm.com>
- yorkie - Yorkie Liu <yorkiefixer@gmail.com>
Collaborators follow the Collaborator Guide in maintaining the Node.js project.
Triagers
- Ayase-252 - Qingyu Deng <i@ayase-lab.com>
- himadriganguly - Himadri Ganguly <himadri.tech@gmail.com> (he/him)
- iam-frankqiu - Frank Qiu <iam.frankqiu@gmail.com> (he/him)
- marsonya - Akhil Marsonya <akhil.marsonya27@gmail.com> (he/him)
- meixg - Xuguang Mei <meixuguang@gmail.com> (he/him)
- Mesteery - Mestery <mestery@protonmail.com> (he/him)
- PoojaDurgad - Pooja Durgad <Pooja.D.P@ibm.com>
- RaisinTen - Darshan Sen <raisinten@gmail.com>
- VoltrexMaster - Mohammed Keyvanzadeh <mohammadkeyvanzade94@gmail.com> (he/him)
Release keys
Primary GPG keys for Node.js Releasers (some Releasers sign with subkeys):
- Beth Griggs <bgriggs@redhat.com>
4ED778F539E3634C779C87C6D7062848A1AB005C - Bryan English <bryan@bryanenglish.com>
141F07595B7B3FFE74309A937405533BE57C7D57 - Colin Ihrig <cjihrig@gmail.com>
94AE36675C464D64BAFA68DD7434390BDBE9B9C5 - Danielle Adams <adamzdanielle@gmail.com>
74F12602B6F1C4E913FAA37AD3A89613643B6201 - James M Snell <jasnell@keybase.io>
71DCFD284A79C3B38668286BC97EC7A07EDE3FC1 - Michaël Zasso <targos@protonmail.com>
8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600 - Myles Borins <myles.borins@gmail.com>
C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8 - Richard Lau <rlau@redhat.com>
C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C - Rod Vagg <rod@vagg.org>
DD8F2338BAE7501E3DD5AC78C273792F7D83545D - Ruben Bridgewater <ruben@bridgewater.de>
A48C2BEE680E841632CD4E44F07496B3EB3C1762 - Ruy Adorno <ruyadorno@hotmail.com>
108F52B48DB57BB0CC439B2997B01419BD92F80A - Shelley Vohr <shelley.vohr@gmail.com>
B9E2F5981AA6E0CD28160D9FF13993A75599653C
To import the full set of trusted release keys (including subkeys possibly used to sign releases):
gpg --keyserver hkps://keys.openpgp.org --recv-keys 4ED778F539E3634C779C87C6D7062848A1AB005C
gpg --keyserver hkps://keys.openpgp.org --recv-keys 141F07595B7B3FFE74309A937405533BE57C7D57
gpg --keyserver hkps://keys.openpgp.org --recv-keys 94AE36675C464D64BAFA68DD7434390BDBE9B9C5
gpg --keyserver hkps://keys.openpgp.org --recv-keys 74F12602B6F1C4E913FAA37AD3A89613643B6201
gpg --keyserver hkps://keys.openpgp.org --recv-keys 71DCFD284A79C3B38668286BC97EC7A07EDE3FC1
gpg --keyserver hkps://keys.openpgp.org --recv-keys 8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600
gpg --keyserver hkps://keys.openpgp.org --recv-keys C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8
gpg --keyserver hkps://keys.openpgp.org --recv-keys C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C
gpg --keyserver hkps://keys.openpgp.org --recv-keys DD8F2338BAE7501E3DD5AC78C273792F7D83545D
gpg --keyserver hkps://keys.openpgp.org --recv-keys A48C2BEE680E841632CD4E44F07496B3EB3C1762
gpg --keyserver hkps://keys.openpgp.org --recv-keys 108F52B48DB57BB0CC439B2997B01419BD92F80A
gpg --keyserver hkps://keys.openpgp.org --recv-keys B9E2F5981AA6E0CD28160D9FF13993A75599653C
See Verifying binaries for how to use these keys to verify a downloaded file.
Other keys used to sign some previous releases
- Chris Dickinson <christopher.s.dickinson@gmail.com>
9554F04D7259F04124DE6B476D5A82AC7E37093B - Danielle Adams <adamzdanielle@gmail.com>
1C050899334244A8AF75E53792EF661D867B9DFA - Evan Lucas <evanlucas@me.com>
B9AE9905FFD7803F25714661B63B535A4C206CA9 - Gibson Fahnestock <gibfahn@gmail.com>
77984A986EBC2AA786BC0F66B01FBB92821C587A - Isaac Z. Schlueter <i@izs.me>
93C7E9E91B49E432C2F75674B0A78B0A6C481CF6 - Italo A. Casas <me@italoacasas.com>
56730D5401028683275BD23C23EFEFE93C4CFFFE - Jeremiah Senkpiel <fishrock@keybase.io>
FD3A5288F042B6850C66B31F09FE44734EB7990E - Julien Gilli <jgilli@fastmail.fm>
114F43EE0176B71C7BC219DD50A3051F888C628D - Timothy J Fontaine <tjfontaine@gmail.com>
7937DFD2AB06298B2293C3187D33FF9D0246406D
Security release stewards
When possible, the commitment to take slots in the security release steward rotation is made by companies in order to ensure individuals who act as security stewards have the support and recognition from their employer to be able to prioritize security releases. Security release stewards manage security releases on a rotation basis as outlined in the security release process.
- Datadog
- bengl - Bryan English <bryan@bryanenglish.com> (he/him)
- vdeturckheim - Vladimir de Turckheim <vlad2t@hotmail.com> (he/him)
- NearForm
- mcollina - Matteo Collina <matteo.collina@gmail.com> (he/him)
- Red Hat and IBM
- joesepi - Joe Sepi <joesepi@ibm.com> (he/him)
- mhdawson - Michael Dawson <midawson@redhat.com> (he/him)
License
Node.js is available under the MIT license. Node.js also includes external libraries that are available under a variety of licenses. See LICENSE for the full license text.