mirrors/nodejs
mirrors/nodejs
0
0
Fork 0
mirror of https://github.com/nodejs/node.git synced 2024-11-21 13:09:21 +01:00
Code Issues Releases Activity
Cross-platform JavaScript runtime environment https://nodejs.org/
42,876 Commits 47 Branches 857 Tags 1.9 GiB
JavaScript 61.7%
C++ 22.7%
Python 10.9%
C 3%
HTML 0.7%
Other 0.9%
16184633f6
Go to file
Filip Skokan 16184633f6
crypto: allow length=0 for HKDF and PBKDF2 in SubtleCrypto.deriveBits 
PR-URL: https://github.com/nodejs/node/pull/55866
Reviewed-By: Matthew Aitken <maitken033380023@gmail.com>
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
Reviewed-By: Jason Zhang <xzha4350@gmail.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Tobias Nießen <tniessen@tnie.de>
2024-11-17 13:13:47 +00:00
.configurations build,win: add winget config to set up env 2024-09-30 15:17:20 +00:00
.devcontainer meta: remove initializeCommand from devcontainer 2024-05-26 12:34:11 +00:00
.github tools: fix exclude labels for commit-queue 2024-11-11 01:30:27 +08:00
android-patches build: rewritten the Android build system 2022-09-12 08:10:29 +00:00
benchmark benchmark: add test-reporters 2024-11-16 03:55:13 +00:00
deps deps: update simdutf to 5.6.1 2024-11-16 23:24:13 +00:00
doc util: inspect: enumerable Symbols no longer have square brackets 2024-11-17 06:57:37 +00:00
lib crypto: allow length=0 for HKDF and PBKDF2 in SubtleCrypto.deriveBits 2024-11-17 13:13:47 +00:00
src src: use env strings to create sqlite results 2024-11-17 09:25:03 +00:00
test crypto: allow length=0 for HKDF and PBKDF2 in SubtleCrypto.deriveBits 2024-11-17 13:13:47 +00:00
tools tools: update doc to new version 2024-11-17 11:23:48 +00:00
typings src: nuke deprecated and un-used enum members in OptionEnvvarSettings 2024-11-05 20:44:24 +00:00
.clang-format Revert "build: upgrade clang-format to v18" 2024-09-18 15:58:34 +00:00
.cpplint src: modernize likely/unlikely hints 2024-09-30 18:04:16 +00:00
.editorconfig tools: move ESLint to tools/eslint 2024-06-19 19:54:08 +00:00
.gitattributes doc: add .gitattributes for md files 2024-04-24 08:15:07 +03:00
.gitignore build: stop pre-compiling lint-md 2024-11-01 23:45:02 +00:00
.gitpod.yml doc,tools: switch to @node-core/utils 2023-09-25 11:48:03 +00:00
.mailmap meta: add mailmap entry for abmusse 2024-09-30 22:51:34 +00:00
.nycrc build: fix not valid json in coverage 2024-09-30 20:27:55 +00:00
.yamllint.yaml build: extend yamllint configuration 2022-02-14 19:09:26 +01:00
android_configure.py build: exit on unsupported host OS for Android 2024-05-25 07:39:56 +00:00
android-configure build: support up to python 3.13 in android-configure 2024-09-21 09:20:53 -07:00
BSDmakefile
BUILD.gn build: add GN build files 2023-11-11 09:51:05 +00:00
BUILDING.md doc: add instructions for WinGet build 2024-10-15 12:13:30 +00:00
CHANGELOG.md 2024-11-12, Version 18.20.5 'Hydrogen' (LTS) 2024-11-12 22:35:04 +01:00
CODE_OF_CONDUCT.md tools: avoid unnecessary escaping in markdown formatter 2021-10-31 09:36:05 -07:00
codecov.yml build: update gcovr to 7.2 and codecov config 2024-07-27 21:52:23 +00:00
common.gypi deps: V8: cherry-pick f915fa4c9f41 2024-10-23 13:11:06 +00:00
configure build: update required python version to 3.8 2024-08-23 21:20:32 +00:00
configure.py build: fix building with system icu 76 2024-10-29 23:24:38 +00:00
CONTRIBUTING.md doc, meta: use markdown rather than HTML in CONTRIBUTING.md 2024-06-08 19:16:44 +00:00
eslint.config.mjs tools: remove non-existent file from eslint config 2024-11-10 01:10:08 +00:00
glossary.md doc, meta: add PTAL to glossary 2024-07-14 17:53:46 +00:00
GOVERNANCE.md doc: make docs more welcoming and descriptive for newcomers 2024-05-06 00:07:10 +02:00
LICENSE doc: run license-builder 2024-11-11 15:45:43 +00:00
Makefile tools: disable doc building when ICU is not available 2024-11-17 11:23:47 +00:00
node.gni build: implement node_use_amaro flag in GN build 2024-11-11 04:33:06 +00:00
node.gyp build: conditionally compile bundled sqlite 2024-10-21 16:57:14 +00:00
node.gypi build,win: enable pch for clang-cl 2024-10-11 10:28:55 +00:00
onboarding.md doc: edit onboarding guide to clarify when mailmap addition is needed 2024-10-11 13:30:32 +00:00
pyproject.toml meta: remove unneeded ignore rules from ruff 2024-09-18 17:07:37 +02:00
README.md tools: lint README lists more strictly 2024-11-02 14:14:40 +00:00
SECURITY.md meta: fix links in SECURITY.md 2024-09-03 16:38:27 +00:00
suppressions.supp build,tools: add test-ubsan ci 2024-03-15 17:49:51 +00:00
tsconfig.json lib: fix internalBinding typings 2023-09-23 10:48:34 +00:00
unofficial.gni build: implement node_use_amaro flag in GN build 2024-11-11 04:33:06 +00:00
vcbuild.bat build: use rclone instead of aws CLI 2024-11-02 08:00:53 +00:00

README.md

Node.js

Node.js is an open-source, cross-platform JavaScript runtime environment.

For information on using Node.js, see the Node.js website.

The Node.js project uses an open governance model. The OpenJS Foundation provides support for the project.

Contributors are expected to act in a collaborative manner to move the project forward. We encourage the constructive exchange of contrary opinions and compromise. The TSC reserves the right to limit or block contributors who repeatedly act in ways that discourage, exhaust, or otherwise negatively affect other participants.

This project has a Code of Conduct.

Table of contents

Support

Looking for help? Check out the instructions for getting support.

Release types

  • Current: Under active development. Code for the Current release is in the branch for its major version number (for example, v22.x). Node.js releases a new major version every 6 months, allowing for breaking changes. This happens in April and October every year. Releases appearing each October have a support life of 8 months. Releases appearing each April convert to LTS (see below) each October.
  • LTS: Releases that receive Long Term Support, with a focus on stability and security. Every even-numbered major version will become an LTS release. LTS releases receive 12 months of Active LTS support and a further 18 months of Maintenance. LTS release lines have alphabetically-ordered code names, beginning with v4 Argon. There are no breaking changes or feature additions, except in some special circumstances.
  • Nightly: Code from the Current branch built every 24-hours when there are changes. Use with caution.

Current and LTS releases follow semantic versioning. A member of the Release Team signs each Current and LTS release. For more information, see the Release README.

Download

Binaries, installers, and source tarballs are available at https://nodejs.org/en/download/.

Current and LTS releases

https://nodejs.org/download/release/

The latest directory is an alias for the latest Current release. The latest-codename directory is an alias for the latest release from an LTS line. For example, the latest-hydrogen directory contains the latest Hydrogen (Node.js 18) release.

Nightly releases

https://nodejs.org/download/nightly/

Each directory and filename includes the version (e.g., v22.0.0), followed by the UTC date (e.g., 20240424 for April 24, 2024), and the short commit SHA of the HEAD of the release (e.g., ddd0a9e494). For instance, a full directory name might look like v22.0.0-nightly20240424ddd0a9e494.

API documentation

Documentation for the latest Current release is at https://nodejs.org/api/. Version-specific documentation is available in each release directory in the docs subdirectory. Version-specific documentation is also at https://nodejs.org/download/docs/.

Verifying binaries

Download directories contain a SHASUMS256.txt file with SHA checksums for the files.

To download SHASUMS256.txt using curl:

curl -O https://nodejs.org/dist/vx.y.z/SHASUMS256.txt

To check that downloaded files match the checksum, use sha256sum:

sha256sum -c SHASUMS256.txt --ignore-missing

For Current and LTS, the GPG detached signature of SHASUMS256.txt is in SHASUMS256.txt.sig. You can use it with gpg to verify the integrity of SHASUMS256.txt. You will first need to import the GPG keys of individuals authorized to create releases.

See Release keys for commands to import active release keys.

Next, download the SHASUMS256.txt.sig for the release:

curl -O https://nodejs.org/dist/vx.y.z/SHASUMS256.txt.sig

Then use gpg --verify SHASUMS256.txt.sig SHASUMS256.txt to verify the file's signature.

Building Node.js

See BUILDING.md for instructions on how to build Node.js from source and a list of supported platforms.

Security

For information on reporting security vulnerabilities in Node.js, see SECURITY.md.

Contributing to Node.js

Current project team members

For information about the governance of the Node.js project, see GOVERNANCE.md.

TSC (Technical Steering Committee)

TSC voting members

TSC regular members

TSC emeriti members

TSC emeriti members

Collaborators

Emeriti

Collaborator emeriti

Collaborators follow the Collaborator Guide in maintaining the Node.js project.

Triagers

Triagers follow the Triage Guide when responding to new issues.

Release keys

Primary GPG keys for Node.js Releasers (some Releasers sign with subkeys):

To import the full set of trusted release keys (including subkeys possibly used to sign releases):

gpg --keyserver hkps://keys.openpgp.org --recv-keys C0D6248439F1D5604AAFFB4021D900FFDB233756 # Antoine du Hamel
gpg --keyserver hkps://keys.openpgp.org --recv-keys DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7 # Juan José Arboleda
gpg --keyserver hkps://keys.openpgp.org --recv-keys CC68F5A3106FF448322E48ED27F5E38D5B0A215F # Marco Ippolito
gpg --keyserver hkps://keys.openpgp.org --recv-keys 8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600 # Michaël Zasso
gpg --keyserver hkps://keys.openpgp.org --recv-keys 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 # Rafael Gonzaga
gpg --keyserver hkps://keys.openpgp.org --recv-keys C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C # Richard Lau
gpg --keyserver hkps://keys.openpgp.org --recv-keys 108F52B48DB57BB0CC439B2997B01419BD92F80A # Ruy Adorno
gpg --keyserver hkps://keys.openpgp.org --recv-keys A363A499291CBBC940DD62E41F10027AF002F8B0 # Ulises Gascón

See Verifying binaries for how to use these keys to verify a downloaded file.

Other keys used to sign some previous releases

Security release stewards

When possible, the commitment to take slots in the security release steward rotation is made by companies in order to ensure individuals who act as security stewards have the support and recognition from their employer to be able to prioritize security releases. Security release stewards manage security releases on a rotation basis as outlined in the security release process.

License

Node.js is available under the MIT License. Node.js also includes external libraries that are available under a variety of licenses. See LICENSE for the full license text.