mirror of
https://github.com/nodejs/node.git
synced 2024-11-29 23:16:30 +01:00
0028241fb4
PR-URL: https://github.com/nodejs/node/pull/17264 Reviewed-By: James M Snell <jasnell@gmail.com> Reviewed-By: Myles Borins <myles.borins@gmail.com> Reviewed-By: Michael Dawson <michael_dawson@ca.ibm.com> Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: Anatoli Papirovski <apapirovski@mac.com>
597 lines
26 KiB
Markdown
597 lines
26 KiB
Markdown
<p align="center">
|
||
<a href="https://nodejs.org/">
|
||
<img alt="Node.js" src="https://nodejs.org/static/images/logo-light.svg" width="400"/>
|
||
</a>
|
||
</p>
|
||
<p align="center">
|
||
<a title="CII Best Practices" href="https://bestpractices.coreinfrastructure.org/projects/29"><img src="https://bestpractices.coreinfrastructure.org/projects/29/badge"></a>
|
||
</p>
|
||
|
||
Node.js is a JavaScript runtime built on Chrome's V8 JavaScript engine. Node.js
|
||
uses an event-driven, non-blocking I/O model that makes it lightweight and
|
||
efficient. The Node.js package ecosystem, [npm][], is the largest ecosystem of
|
||
open source libraries in the world.
|
||
|
||
The Node.js project is supported by the
|
||
[Node.js Foundation](https://nodejs.org/en/foundation/). Contributions,
|
||
policies, and releases are managed under an
|
||
[open governance model](./GOVERNANCE.md).
|
||
|
||
**This project is bound by a [Code of Conduct][].**
|
||
|
||
|
||
# Table of Contents
|
||
|
||
* [Support](#support)
|
||
* [Release Types](#release-types)
|
||
* [Download](#download)
|
||
* [Current and LTS Releases](#current-and-lts-releases)
|
||
* [Nightly Releases](#nightly-releases)
|
||
* [API Documentation](#api-documentation)
|
||
* [Verifying Binaries](#verifying-binaries)
|
||
* [Building Node.js](#building-nodejs)
|
||
* [Security](#security)
|
||
* [Current Project Team Members](#current-project-team-members)
|
||
* [TSC (Technical Steering Committee)](#tsc-technical-steering-committee)
|
||
* [Collaborators](#collaborators)
|
||
* [Release Team](#release-team)
|
||
* [Contributing to Node.js](#contributing-to-nodejs)
|
||
|
||
## Support
|
||
|
||
Node.js contributors have limited availability to address general support
|
||
questions. Please make sure you are using a [currently-supported version of
|
||
Node.js](https://github.com/nodejs/Release#release-schedule).
|
||
|
||
When looking for support, please first search for your question in these venues:
|
||
|
||
* [Node.js Website][]
|
||
* [Node.js Help][]
|
||
* [Open or closed issues in the Node.js GitHub organization](https://github.com/issues?utf8=%E2%9C%93&q=sort%3Aupdated-desc+org%3Anodejs+is%3Aissue)
|
||
* [Questions tagged 'node.js' on StackOverflow][]
|
||
|
||
If you didn't find an answer in one of the venues above, you can:
|
||
|
||
* Join the **unofficial** [#node.js channel on chat.freenode.net][]. See
|
||
<http://nodeirc.info/> for more information.
|
||
|
||
GitHub issues are meant for tracking enhancements and bugs, not general support.
|
||
|
||
Remember, libre != gratis; the open source license grants you the freedom to use
|
||
and modify, but not commitments of other people's time. Please be respectful,
|
||
and set your expectations accordingly.
|
||
|
||
## Release Types
|
||
|
||
The Node.js project maintains multiple types of releases:
|
||
|
||
* **Current**: Released from active development branches of this repository,
|
||
versioned by [SemVer](https://semver.org) and signed by a member of the
|
||
[Release Team](#release-team).
|
||
Code for Current releases is organized in this repository by major version
|
||
number. For example: [v4.x](https://github.com/nodejs/node/tree/v4.x).
|
||
The major version number of Current releases will increment every 6 months
|
||
allowing for breaking changes to be introduced. This happens in April and
|
||
October every year. Current release lines beginning in October each year have
|
||
a maximum support life of 8 months. Current release lines beginning in April
|
||
each year will convert to LTS (see below) after 6 months and receive further
|
||
support for 30 months.
|
||
* **LTS**: Releases that receive Long-term Support, with a focus on stability
|
||
and security. Every second Current release line (major version) will become an
|
||
LTS line and receive 18 months of _Active LTS_ support and a further 12
|
||
months of _Maintenance_. LTS release lines are given alphabetically
|
||
ordered codenames, beginning with v4 Argon. LTS releases are less frequent
|
||
and will attempt to maintain consistent major and minor version numbers,
|
||
only incrementing patch version numbers. There are no breaking changes or
|
||
feature additions, except in some special circumstances.
|
||
* **Nightly**: Versions of code in this repository on the current Current
|
||
branch, automatically built every 24-hours where changes exist. Use with
|
||
caution.
|
||
|
||
More information can be found in the [LTS README](https://github.com/nodejs/LTS/).
|
||
|
||
### Download
|
||
|
||
Binaries, installers, and source tarballs are available at
|
||
<https://nodejs.org>.
|
||
|
||
#### Current and LTS Releases
|
||
**Current** and **LTS** releases are available at
|
||
<https://nodejs.org/download/release/>, listed under their version strings.
|
||
The [latest](https://nodejs.org/download/release/latest/) directory is an
|
||
alias for the latest Current release. The latest LTS release from an LTS
|
||
line is available in the form: latest-_codename_. For example:
|
||
<https://nodejs.org/download/release/latest-argon>.
|
||
|
||
#### Nightly Releases
|
||
**Nightly** builds are available at
|
||
<https://nodejs.org/download/nightly/>, listed under their version
|
||
string which includes their date (in UTC time) and the commit SHA at
|
||
the HEAD of the release.
|
||
|
||
#### API Documentation
|
||
**API documentation** is available in each release and nightly
|
||
directory under _docs_. <https://nodejs.org/api/> points to the API
|
||
documentation of the latest stable version.
|
||
|
||
### Verifying Binaries
|
||
|
||
Current, LTS and Nightly download directories all contain a _SHASUMS256.txt_
|
||
file that lists the SHA checksums for each file available for
|
||
download.
|
||
|
||
The _SHASUMS256.txt_ can be downloaded using curl.
|
||
|
||
```console
|
||
$ curl -O https://nodejs.org/dist/vx.y.z/SHASUMS256.txt
|
||
```
|
||
|
||
To check that a downloaded file matches the checksum, run
|
||
it through `sha256sum` with a command such as:
|
||
|
||
```console
|
||
$ grep node-vx.y.z.tar.gz SHASUMS256.txt | sha256sum -c -
|
||
```
|
||
|
||
_(Where "node-vx.y.z.tar.gz" is the name of the file you have
|
||
downloaded)_
|
||
|
||
Additionally, Current and LTS releases (not Nightlies) have the GPG
|
||
detached signature of SHASUMS256.txt available as SHASUMS256.txt.sig.
|
||
You can use `gpg` to verify that SHASUMS256.txt has not been tampered with.
|
||
|
||
To verify SHASUMS256.txt has not been altered, you will first need to import
|
||
all of the GPG keys of individuals authorized to create releases. They are
|
||
listed at the bottom of this README under [Release Team](#release-team).
|
||
Use a command such as this to import the keys:
|
||
|
||
```console
|
||
$ gpg --keyserver pool.sks-keyservers.net --recv-keys DD8F2338BAE7501E3DD5AC78C273792F7D83545D
|
||
```
|
||
|
||
_(See the bottom of this README for a full script to import active
|
||
release keys)_
|
||
|
||
Next, download the SHASUMS256.txt.sig for the release:
|
||
|
||
```console
|
||
$ curl -O https://nodejs.org/dist/vx.y.z/SHASUMS256.txt.sig
|
||
```
|
||
|
||
After downloading the appropriate SHASUMS256.txt and SHASUMS256.txt.sig files,
|
||
you can then use `gpg --verify SHASUMS256.txt.sig SHASUMS256.txt` to verify
|
||
that the file has been signed by an authorized member of the Node.js team.
|
||
|
||
Once verified, use the SHASUMS256.txt file to get the checksum for
|
||
the binary verification command above.
|
||
|
||
## Building Node.js
|
||
|
||
See [BUILDING.md](BUILDING.md) for instructions on how to build
|
||
Node.js from source. The document also contains a list of
|
||
officially supported platforms.
|
||
|
||
## Security
|
||
|
||
All security bugs in Node.js are taken seriously and should be reported by
|
||
emailing security@nodejs.org. This will be delivered to a subset of the project
|
||
team who handle security issues. Please don't disclose security bugs
|
||
publicly until they have been handled by the security team.
|
||
|
||
Your email will be acknowledged within 24 hours, and you’ll receive a more
|
||
detailed response to your email within 48 hours indicating the next steps in
|
||
handling your report.
|
||
|
||
There are no hard and fast rules to determine if a bug is worth reporting as
|
||
a security issue. The general rule is any issue worth reporting
|
||
must allow an attacker to compromise the confidentiality, integrity
|
||
or availability of the Node.js application or its system for which the attacker
|
||
does not already have the capability.
|
||
|
||
To illustrate the point, here are some examples of past issues and what the
|
||
Security Reponse Team thinks of them. When in doubt, however, please do send
|
||
us a report nonetheless.
|
||
|
||
|
||
### Public disclosure preferred
|
||
|
||
- [#14519](https://github.com/nodejs/node/issues/14519): _Internal domain
|
||
function can be used to cause segfaults_. Causing program termination using
|
||
either the public JavaScript APIs or the private bindings layer APIs requires
|
||
the ability to execute arbitrary JavaScript code, which is already the highest
|
||
level of privilege possible.
|
||
|
||
- [#12141](https://github.com/nodejs/node/pull/12141): _buffer: zero fill
|
||
Buffer(num) by default_. The buffer constructor behaviour was documented,
|
||
but found to be prone to [mis-use](https://snyk.io/blog/exploiting-buffer/).
|
||
It has since been changed, but despite much debate, was not considered misuse
|
||
prone enough to justify fixing in older release lines and breaking our
|
||
API stability contract.
|
||
|
||
### Private disclosure preferred
|
||
|
||
- [CVE-2016-7099](https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/):
|
||
_Fix invalid wildcard certificate validation check_. This is a high severity
|
||
defect that would allow a malicious TLS server to serve an invalid wildcard
|
||
certificate for its hostname and be improperly validated by a Node.js client.
|
||
|
||
- [#5507](https://github.com/nodejs/node/pull/5507): _Fix a defect that makes
|
||
the CacheBleed Attack possible_. Many, though not all, OpenSSL vulnerabilities
|
||
in the TLS/SSL protocols also effect Node.js.
|
||
|
||
- [CVE-2016-2216](https://nodejs.org/en/blog/vulnerability/february-2016-security-releases/):
|
||
_Fix defects in HTTP header parsing for requests and responses that can allow
|
||
response splitting_. While the impact of this vulnerability is application and
|
||
network dependent, it is remotely exploitable in the HTTP protocol.
|
||
|
||
When in doubt, please do send us a report.
|
||
|
||
|
||
## Current Project Team Members
|
||
|
||
The Node.js project team comprises a group of core collaborators and a sub-group
|
||
that forms the _Technical Steering Committee_ (TSC) which governs the project.
|
||
For more information about the governance of the Node.js project, see
|
||
[GOVERNANCE.md](./GOVERNANCE.md).
|
||
|
||
### TSC (Technical Steering Committee)
|
||
|
||
* [addaleax](https://github.com/addaleax) -
|
||
**Anna Henningsen** <anna@addaleax.net> (she/her)
|
||
* [ChALkeR](https://github.com/ChALkeR) -
|
||
**Сковорода Никита Андреевич** <chalkerx@gmail.com> (he/him)
|
||
* [cjihrig](https://github.com/cjihrig) -
|
||
**Colin Ihrig** <cjihrig@gmail.com>
|
||
* [evanlucas](https://github.com/evanlucas) -
|
||
**Evan Lucas** <evanlucas@me.com> (he/him)
|
||
* [fhinkel](https://github.com/fhinkel) -
|
||
**Franziska Hinkelmann** <franziska.hinkelmann@gmail.com> (she/her)
|
||
* [Fishrock123](https://github.com/Fishrock123) -
|
||
**Jeremiah Senkpiel** <fishrock123@rocketmail.com>
|
||
* [indutny](https://github.com/indutny) -
|
||
**Fedor Indutny** <fedor.indutny@gmail.com>
|
||
* [jasnell](https://github.com/jasnell) -
|
||
**James M Snell** <jasnell@gmail.com> (he/him)
|
||
* [joshgav](https://github.com/joshgav) -
|
||
**Josh Gavant** <josh.gavant@outlook.com>
|
||
* [joyeecheung](https://github.com/joyeecheung) -
|
||
**Joyee Cheung** <joyeec9h3@gmail.com> (she/her)
|
||
* [mcollina](https://github.com/mcollina) -
|
||
**Matteo Collina** <matteo.collina@gmail.com> (he/him)
|
||
* [mhdawson](https://github.com/mhdawson) -
|
||
**Michael Dawson** <michael_dawson@ca.ibm.com> (he/him)
|
||
* [mscdex](https://github.com/mscdex) -
|
||
**Brian White** <mscdex@mscdex.net>
|
||
* [MylesBorins](https://github.com/MylesBorins) -
|
||
**Myles Borins** <myles.borins@gmail.com> (he/him)
|
||
* [ofrobots](https://github.com/ofrobots) -
|
||
**Ali Ijaz Sheikh** <ofrobots@google.com>
|
||
* [rvagg](https://github.com/rvagg) -
|
||
**Rod Vagg** <rod@vagg.org>
|
||
* [targos](https://github.com/targos) -
|
||
**Michaël Zasso** <targos@protonmail.com> (he/him)
|
||
* [thefourtheye](https://github.com/thefourtheye) -
|
||
**Sakthipriyan Vairamani** <thechargingvolcano@gmail.com> (he/him)
|
||
* [trevnorris](https://github.com/trevnorris) -
|
||
**Trevor Norris** <trev.norris@gmail.com>
|
||
* [Trott](https://github.com/Trott) -
|
||
**Rich Trott** <rtrott@gmail.com> (he/him)
|
||
|
||
### TSC Emeriti
|
||
|
||
* [bnoordhuis](https://github.com/bnoordhuis) -
|
||
**Ben Noordhuis** <info@bnoordhuis.nl>
|
||
* [chrisdickinson](https://github.com/chrisdickinson) -
|
||
**Chris Dickinson** <christopher.s.dickinson@gmail.com>
|
||
* [isaacs](https://github.com/isaacs) -
|
||
**Isaac Z. Schlueter** <i@izs.me>
|
||
* [nebrius](https://github.com/nebrius) -
|
||
**Bryan Hughes** <bryan@nebri.us>
|
||
* [orangemocha](https://github.com/orangemocha) -
|
||
**Alexis Campailla** <orangemocha@nodejs.org>
|
||
* [piscisaureus](https://github.com/piscisaureus) -
|
||
**Bert Belder** <bertbelder@gmail.com>
|
||
* [shigeki](https://github.com/shigeki) -
|
||
**Shigeki Ohtsu** <ohtsu@ohtsu.org> (he/him)
|
||
|
||
### Collaborators
|
||
|
||
* [abouthiroppy](https://github.com/abouthiroppy) -
|
||
**Yuta Hiroto** <hello@about-hiroppy.com> (he/him)
|
||
* [addaleax](https://github.com/addaleax) -
|
||
**Anna Henningsen** <anna@addaleax.net> (she/her)
|
||
* [ak239](https://github.com/ak239) -
|
||
**Aleksei Koziatinskii** <ak239spb@gmail.com>
|
||
* [andrasq](https://github.com/andrasq) -
|
||
**Andras** <andras@kinvey.com>
|
||
* [AndreasMadsen](https://github.com/AndreasMadsen) -
|
||
**Andreas Madsen** <amwebdk@gmail.com> (he/him)
|
||
* [AnnaMag](https://github.com/AnnaMag) -
|
||
**Anna M. Kedzierska** <anna.m.kedzierska@gmail.com>
|
||
* [apapirovski](https://github.com/apapirovski) -
|
||
**Anatoli Papirovski** <apapirovski@mac.com> (he/him)
|
||
* [aqrln](https://github.com/aqrln) -
|
||
**Alexey Orlenko** <eaglexrlnk@gmail.com> (he/him)
|
||
* [bengl](https://github.com/bengl) -
|
||
**Bryan English** <bryan@bryanenglish.com> (he/him)
|
||
* [benjamingr](https://github.com/benjamingr) -
|
||
**Benjamin Gruenbaum** <benjamingr@gmail.com>
|
||
* [bmeck](https://github.com/bmeck) -
|
||
**Bradley Farias** <bradley.meck@gmail.com>
|
||
* [bmeurer](https://github.com/bmeurer) -
|
||
**Benedikt Meurer** <benedikt.meurer@gmail.com>
|
||
* [bnoordhuis](https://github.com/bnoordhuis) -
|
||
**Ben Noordhuis** <info@bnoordhuis.nl>
|
||
* [brendanashworth](https://github.com/brendanashworth) -
|
||
**Brendan Ashworth** <brendan.ashworth@me.com>
|
||
* [BridgeAR](https://github.com/BridgeAR) -
|
||
**Ruben Bridgewater** <ruben@bridgewater.de>
|
||
* [bzoz](https://github.com/bzoz) -
|
||
**Bartosz Sosnowski** <bartosz@janeasystems.com>
|
||
* [calvinmetcalf](https://github.com/calvinmetcalf) -
|
||
**Calvin Metcalf** <calvin.metcalf@gmail.com>
|
||
* [ChALkeR](https://github.com/ChALkeR) -
|
||
**Сковорода Никита Андреевич** <chalkerx@gmail.com> (he/him)
|
||
* [chrisdickinson](https://github.com/chrisdickinson) -
|
||
**Chris Dickinson** <christopher.s.dickinson@gmail.com>
|
||
* [cjihrig](https://github.com/cjihrig) -
|
||
**Colin Ihrig** <cjihrig@gmail.com>
|
||
* [claudiorodriguez](https://github.com/claudiorodriguez) -
|
||
**Claudio Rodriguez** <cjrodr@yahoo.com>
|
||
* [danbev](https://github.com/danbev) -
|
||
**Daniel Bevenius** <daniel.bevenius@gmail.com>
|
||
* [DavidCai1993](https://github.com/DavidCai1993) -
|
||
**David Cai** <davidcai1993@yahoo.com> (he/him)
|
||
* [edsadr](https://github.com/edsadr) -
|
||
**Adrian Estrada** <edsadr@gmail.com> (he/him)
|
||
* [eljefedelrodeodeljefe](https://github.com/eljefedelrodeodeljefe) -
|
||
**Robert Jefe Lindstaedt** <robert.lindstaedt@gmail.com>
|
||
* [estliberitas](https://github.com/estliberitas) -
|
||
**Alexander Makarenko** <estliberitas@gmail.com>
|
||
* [eugeneo](https://github.com/eugeneo) -
|
||
**Eugene Ostroukhov** <eostroukhov@google.com>
|
||
* [evanlucas](https://github.com/evanlucas) -
|
||
**Evan Lucas** <evanlucas@me.com> (he/him)
|
||
* [fhinkel](https://github.com/fhinkel) -
|
||
**Franziska Hinkelmann** <franziska.hinkelmann@gmail.com> (she/her)
|
||
* [firedfox](https://github.com/firedfox) -
|
||
**Daniel Wang** <wangyang0123@gmail.com>
|
||
* [Fishrock123](https://github.com/Fishrock123) -
|
||
**Jeremiah Senkpiel** <fishrock123@rocketmail.com>
|
||
* [gabrielschulhof](https://github.com/gabrielschulhof) -
|
||
**Gabriel Schulhof** <gabriel.schulhof@intel.com>
|
||
* [geek](https://github.com/geek) -
|
||
**Wyatt Preul** <wpreul@gmail.com>
|
||
* [gibfahn](https://github.com/gibfahn) -
|
||
**Gibson Fahnestock** <gibfahn@gmail.com> (he/him)
|
||
* [gireeshpunathil](https://github.com/gireeshpunathil) -
|
||
**Gireesh Punathil** <gpunathi@in.ibm.com> (he/him)
|
||
* [guybedford](https://github.com/guybedford) -
|
||
**Guy Bedford** <guybedford@gmail.com> (he/him)
|
||
* [hashseed](https://github.com/hashseed) -
|
||
**Yang Guo** <yangguo@chromium.org> (he/him)
|
||
* [iarna](https://github.com/iarna) -
|
||
**Rebecca Turner** <me@re-becca.org>
|
||
* [imran-iq](https://github.com/imran-iq) -
|
||
**Imran Iqbal** <imran@imraniqbal.org>
|
||
* [imyller](https://github.com/imyller) -
|
||
**Ilkka Myller** <ilkka.myller@nodefield.com>
|
||
* [indutny](https://github.com/indutny) -
|
||
**Fedor Indutny** <fedor.indutny@gmail.com>
|
||
* [italoacasas](https://github.com/italoacasas) -
|
||
**Italo A. Casas** <me@italoacasas.com> (he/him)
|
||
* [JacksonTian](https://github.com/JacksonTian) -
|
||
**Jackson Tian** <shyvo1987@gmail.com>
|
||
* [jasnell](https://github.com/jasnell) -
|
||
**James M Snell** <jasnell@gmail.com> (he/him)
|
||
* [jasongin](https://github.com/jasongin) -
|
||
**Jason Ginchereau** <jasongin@microsoft.com>
|
||
* [jbergstroem](https://github.com/jbergstroem) -
|
||
**Johan Bergström** <bugs@bergstroem.nu>
|
||
* [jhamhader](https://github.com/jhamhader) -
|
||
**Yuval Brik** <yuval@brik.org.il>
|
||
* [jkrems](https://github.com/jkrems) -
|
||
**Jan Krems** <jan.krems@gmail.com> (he/him)
|
||
* [joaocgreis](https://github.com/joaocgreis) -
|
||
**João Reis** <reis@janeasystems.com>
|
||
* [joshgav](https://github.com/joshgav) -
|
||
**Josh Gavant** <josh.gavant@outlook.com>
|
||
* [joyeecheung](https://github.com/joyeecheung) -
|
||
**Joyee Cheung** <joyeec9h3@gmail.com> (she/her)
|
||
* [julianduque](https://github.com/julianduque) -
|
||
**Julian Duque** <julianduquej@gmail.com> (he/him)
|
||
* [JungMinu](https://github.com/JungMinu) -
|
||
**Minwoo Jung** <minwoo@nodesource.com> (he/him)
|
||
* [kfarnung](https://github.com/kfarnung) -
|
||
**Kyle Farnung** <kfarnung@microsoft.com> (he/him)
|
||
* [kunalspathak](https://github.com/kunalspathak) -
|
||
**Kunal Pathak** <kunal.pathak@microsoft.com>
|
||
* [lance](https://github.com/lance) -
|
||
**Lance Ball** <lball@redhat.com>
|
||
* [lpinca](https://github.com/lpinca) -
|
||
**Luigi Pinca** <luigipinca@gmail.com> (he/him)
|
||
* [lucamaraschi](https://github.com/lucamaraschi) -
|
||
**Luca Maraschi** <luca.maraschi@gmail.com> (he/him)
|
||
* [matthewloring](https://github.com/matthewloring) -
|
||
**Matthew Loring** <mattloring@google.com>
|
||
* [mcollina](https://github.com/mcollina) -
|
||
**Matteo Collina** <matteo.collina@gmail.com> (he/him)
|
||
* [mhdawson](https://github.com/mhdawson) -
|
||
**Michael Dawson** <michael_dawson@ca.ibm.com> (he/him)
|
||
* [micnic](https://github.com/micnic) -
|
||
**Nicu Micleușanu** <micnic90@gmail.com> (he/him)
|
||
* [mikeal](https://github.com/mikeal) -
|
||
**Mikeal Rogers** <mikeal.rogers@gmail.com>
|
||
* [misterdjules](https://github.com/misterdjules) -
|
||
**Julien Gilli** <jgilli@nodejs.org>
|
||
* [mscdex](https://github.com/mscdex) -
|
||
**Brian White** <mscdex@mscdex.net>
|
||
* [MylesBorins](https://github.com/MylesBorins) -
|
||
**Myles Borins** <myles.borins@gmail.com> (he/him)
|
||
* [not-an-aardvark](https://github.com/not-an-aardvark) -
|
||
**Teddy Katz** <teddy.katz@gmail.com>
|
||
* [ofrobots](https://github.com/ofrobots) -
|
||
**Ali Ijaz Sheikh** <ofrobots@google.com>
|
||
* [orangemocha](https://github.com/orangemocha) -
|
||
**Alexis Campailla** <orangemocha@nodejs.org>
|
||
* [othiym23](https://github.com/othiym23) -
|
||
**Forrest L Norvell** <ogd@aoaioxxysz.net> (he/him)
|
||
* [phillipj](https://github.com/phillipj) -
|
||
**Phillip Johnsen** <johphi@gmail.com>
|
||
* [pmq20](https://github.com/pmq20) -
|
||
**Minqi Pan** <pmq2001@gmail.com>
|
||
* [princejwesley](https://github.com/princejwesley) -
|
||
**Prince John Wesley** <princejohnwesley@gmail.com>
|
||
* [Qard](https://github.com/Qard) -
|
||
**Stephen Belanger** <admin@stephenbelanger.com> (he/him)
|
||
* [refack](https://github.com/refack) -
|
||
**Refael Ackermann** <refack@gmail.com> (he/him)
|
||
* [richardlau](https://github.com/richardlau) -
|
||
**Richard Lau** <riclau@uk.ibm.com>
|
||
* [rmg](https://github.com/rmg) -
|
||
**Ryan Graham** <r.m.graham@gmail.com>
|
||
* [robertkowalski](https://github.com/robertkowalski) -
|
||
**Robert Kowalski** <rok@kowalski.gd>
|
||
* [romankl](https://github.com/romankl) -
|
||
**Roman Klauke** <romaaan.git@gmail.com>
|
||
* [ronkorving](https://github.com/ronkorving) -
|
||
**Ron Korving** <ron@ronkorving.nl>
|
||
* [RReverser](https://github.com/RReverser) -
|
||
**Ingvar Stepanyan** <me@rreverser.com>
|
||
* [rvagg](https://github.com/rvagg) -
|
||
**Rod Vagg** <rod@vagg.org>
|
||
* [saghul](https://github.com/saghul) -
|
||
**Saúl Ibarra Corretgé** <saghul@gmail.com>
|
||
* [sam-github](https://github.com/sam-github) -
|
||
**Sam Roberts** <vieuxtech@gmail.com>
|
||
* [santigimeno](https://github.com/santigimeno) -
|
||
**Santiago Gimeno** <santiago.gimeno@gmail.com>
|
||
* [sebdeckers](https://github.com/sebdeckers) -
|
||
**Sebastiaan Deckers** <sebdeckers83@gmail.com>
|
||
* [seishun](https://github.com/seishun) -
|
||
**Nikolai Vavilov** <vvnicholas@gmail.com>
|
||
* [shigeki](https://github.com/shigeki) -
|
||
**Shigeki Ohtsu** <ohtsu@ohtsu.org> (he/him)
|
||
* [silverwind](https://github.com/silverwind) -
|
||
**Roman Reiss** <me@silverwind.io>
|
||
* [srl295](https://github.com/srl295) -
|
||
**Steven R Loomis** <srloomis@us.ibm.com>
|
||
* [stefanmb](https://github.com/stefanmb) -
|
||
**Stefan Budeanu** <stefan@budeanu.com>
|
||
* [targos](https://github.com/targos) -
|
||
**Michaël Zasso** <targos@protonmail.com> (he/him)
|
||
* [thefourtheye](https://github.com/thefourtheye) -
|
||
**Sakthipriyan Vairamani** <thechargingvolcano@gmail.com> (he/him)
|
||
* [thekemkid](https://github.com/thekemkid) -
|
||
**Glen Keane** <glenkeane.94@gmail.com> (he/him)
|
||
* [thlorenz](https://github.com/thlorenz) -
|
||
**Thorsten Lorenz** <thlorenz@gmx.de>
|
||
* [TimothyGu](https://github.com/TimothyGu) -
|
||
**Timothy Gu** <timothygu99@gmail.com> (he/him)
|
||
* [tniessen](https://github.com/tniessen) -
|
||
**Tobias Nießen** <tniessen@tnie.de>
|
||
* [trevnorris](https://github.com/trevnorris) -
|
||
**Trevor Norris** <trev.norris@gmail.com>
|
||
* [Trott](https://github.com/Trott) -
|
||
**Rich Trott** <rtrott@gmail.com> (he/him)
|
||
* [tunniclm](https://github.com/tunniclm) -
|
||
**Mike Tunnicliffe** <m.j.tunnicliffe@gmail.com>
|
||
* [vkurchatkin](https://github.com/vkurchatkin) -
|
||
**Vladimir Kurchatkin** <vladimir.kurchatkin@gmail.com>
|
||
* [vsemozhetbyt](https://github.com/vsemozhetbyt) -
|
||
**Vse Mozhet Byt** <vsemozhetbyt@gmail.com> (he/him)
|
||
* [watilde](https://github.com/watilde) -
|
||
**Daijiro Wachi** <daijiro.wachi@gmail.com> (he/him)
|
||
* [whitlockjc](https://github.com/whitlockjc) -
|
||
**Jeremy Whitlock** <jwhitlock@apache.org>
|
||
* [XadillaX](https://github.com/XadillaX) -
|
||
**Khaidi Chu** <i@2333.moe> (he/him)
|
||
* [yorkie](https://github.com/yorkie) -
|
||
**Yorkie Liu** <yorkiefixer@gmail.com>
|
||
* [yosuke-furukawa](https://github.com/yosuke-furukawa) -
|
||
**Yosuke Furukawa** <yosuke.furukawa@gmail.com>
|
||
|
||
### Collaborator Emeriti
|
||
|
||
* [isaacs](https://github.com/isaacs) -
|
||
**Isaac Z. Schlueter** <i@izs.me>
|
||
* [lxe](https://github.com/lxe) -
|
||
**Aleksey Smolenchuk** <lxe@lxe.co>
|
||
* [monsanto](https://github.com/monsanto) -
|
||
**Christopher Monsanto** <chris@monsan.to>
|
||
* [Olegas](https://github.com/Olegas) -
|
||
**Oleg Elifantiev** <oleg@elifantiev.ru>
|
||
* [petkaantonov](https://github.com/petkaantonov) -
|
||
**Petka Antonov** <petka_antonov@hotmail.com>
|
||
* [piscisaureus](https://github.com/piscisaureus) -
|
||
**Bert Belder** <bertbelder@gmail.com>
|
||
* [rlidwka](https://github.com/rlidwka) -
|
||
**Alex Kocharin** <alex@kocharin.ru>
|
||
* [tellnes](https://github.com/tellnes) -
|
||
**Christian Tellnes** <christian@tellnes.no>
|
||
|
||
Collaborators follow the [COLLABORATOR_GUIDE.md](./COLLABORATOR_GUIDE.md) in
|
||
maintaining the Node.js project.
|
||
|
||
### Release Team
|
||
|
||
Node.js releases are signed with one of the following GPG keys:
|
||
|
||
* **Colin Ihrig** <cjihrig@gmail.com>
|
||
`94AE36675C464D64BAFA68DD7434390BDBE9B9C5`
|
||
* **Evan Lucas** <evanlucas@me.com>
|
||
`B9AE9905FFD7803F25714661B63B535A4C206CA9`
|
||
* **Gibson Fahnestock** <gibfahn@gmail.com>
|
||
`77984A986EBC2AA786BC0F66B01FBB92821C587A`
|
||
* **Italo A. Casas** <me@italoacasas.com>
|
||
`56730D5401028683275BD23C23EFEFE93C4CFFFE`
|
||
* **James M Snell** <jasnell@keybase.io>
|
||
`71DCFD284A79C3B38668286BC97EC7A07EDE3FC1`
|
||
* **Jeremiah Senkpiel** <fishrock@keybase.io>
|
||
`FD3A5288F042B6850C66B31F09FE44734EB7990E`
|
||
* **Myles Borins** <myles.borins@gmail.com>
|
||
`C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8`
|
||
* **Rod Vagg** <rod@vagg.org>
|
||
`DD8F2338BAE7501E3DD5AC78C273792F7D83545D`
|
||
|
||
The full set of trusted release keys can be imported by running:
|
||
|
||
```shell
|
||
gpg --keyserver pool.sks-keyservers.net --recv-keys 94AE36675C464D64BAFA68DD7434390BDBE9B9C5
|
||
gpg --keyserver pool.sks-keyservers.net --recv-keys FD3A5288F042B6850C66B31F09FE44734EB7990E
|
||
gpg --keyserver pool.sks-keyservers.net --recv-keys 71DCFD284A79C3B38668286BC97EC7A07EDE3FC1
|
||
gpg --keyserver pool.sks-keyservers.net --recv-keys DD8F2338BAE7501E3DD5AC78C273792F7D83545D
|
||
gpg --keyserver pool.sks-keyservers.net --recv-keys C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8
|
||
gpg --keyserver pool.sks-keyservers.net --recv-keys B9AE9905FFD7803F25714661B63B535A4C206CA9
|
||
gpg --keyserver pool.sks-keyservers.net --recv-keys 56730D5401028683275BD23C23EFEFE93C4CFFFE
|
||
gpg --keyserver pool.sks-keyservers.net --recv-keys 77984A986EBC2AA786BC0F66B01FBB92821C587A
|
||
```
|
||
|
||
See the section above on [Verifying Binaries](#verifying-binaries) for details
|
||
on what to do with these keys to verify that a downloaded file is official.
|
||
|
||
Previous releases may also have been signed with one of the following GPG keys:
|
||
|
||
* **Chris Dickinson** <christopher.s.dickinson@gmail.com>
|
||
`9554F04D7259F04124DE6B476D5A82AC7E37093B`
|
||
* **Isaac Z. Schlueter** <i@izs.me>
|
||
`93C7E9E91B49E432C2F75674B0A78B0A6C481CF6`
|
||
* **Julien Gilli** <jgilli@fastmail.fm>
|
||
`114F43EE0176B71C7BC219DD50A3051F888C628D`
|
||
* **Timothy J Fontaine** <tjfontaine@gmail.com>
|
||
`7937DFD2AB06298B2293C3187D33FF9D0246406D`
|
||
|
||
## Contributing to Node.js
|
||
|
||
* [Contributing to the project][]
|
||
* [Working Groups][]
|
||
|
||
[npm]: https://www.npmjs.com
|
||
[Code of Conduct]: https://github.com/nodejs/TSC/blob/master/CODE_OF_CONDUCT.md
|
||
[Contributing to the project]: CONTRIBUTING.md
|
||
[Node.js Help]: https://github.com/nodejs/help
|
||
[Node.js Website]: https://nodejs.org/en/
|
||
[Questions tagged 'node.js' on StackOverflow]: https://stackoverflow.com/questions/tagged/node.js
|
||
[Working Groups]: https://github.com/nodejs/TSC/blob/master/WORKING_GROUPS.md
|
||
[#node.js channel on chat.freenode.net]: https://webchat.freenode.net?channels=node.js&uio=d4
|