探客时代
Node.js
Node.js JavaScript runtime
README
Node.js
Node.js is an open-source, cross-platform JavaScript runtime environment.
For information on using Node.js, see the [Node.js website][].
The Node.js project uses an open governance model. The
[OpenJS Foundation][] provides support for the project.
This project has a [Code of Conduct][].
Table of contents
Support
Looking for help? Check out the
Release types
Current: Under active development. Code for the Current release is in the
branch for its major version number (for example,
v15.x). Node.js releases a new
major version every 6 months, allowing for breaking changes. This happens in
April and October every year. Releases appearing each October have a support
life of 8 months. Releases appearing each April convert to LTS (see below)
each October.
LTS: Releases that receive Long Term Support, with a focus on stability
and security. Every even-numbered major version will become an LTS release.
LTS releases receive 12 months of _Active LTS_ support and a further 18 months
of _Maintenance_. LTS release lines have alphabetically-ordered code names,
beginning with v4 Argon. There are no breaking changes or feature additions,
except in some special circumstances.
Nightly: Code from the Current branch built every 24-hours when there are
changes. Use with caution.
Current and LTS releases follow semantic versioning. A
member of the Release Team signs each Current and LTS release.
For more information, see the
Download
Binaries, installers, and source tarballs are available at
Current and LTS releases
The latest directory is an
alias for the latest Current release. The latest-_codename_ directory is an
alias for the latest release from an LTS line. For example, the
latest-fermium directory
contains the latest Fermium (Node.js 14) release.
Nightly releases
Each directory name and filename contains a date (in UTC) and the commit
SHA at the HEAD of the release.
API documentation
Version-specific documentation is available in each release directory in the
_docs_ subdirectory. Version-specific documentation is also at
Verifying binaries
Download directories contain a SHASUMS256.txt file with SHA checksums for the
files.
To download SHASUMS256.txt using curl:
- ```console
- $ curl -O https://nodejs.org/dist/vx.y.z/SHASUMS256.txt
- ```
To check that a downloaded file matches the checksum, run
it through sha256sum with a command such as:
- ```console
- $ grep node-vx.y.z.tar.gz SHASUMS256.txt | sha256sum -c -
- ```
For Current and LTS, the GPG detached signature of SHASUMS256.txt is in
SHASUMS256.txt.sig. You can use it with gpg to verify the integrity of
SHASUMS256.txt. You will first need to import
import the keys:
- ```console
- $ gpg --keyserver hkps://keys.openpgp.org --recv-keys 4ED778F539E3634C779C87C6D7062848A1AB005C
- ```
See Release keys for a script to import active release keys.
Next, download the SHASUMS256.txt.sig for the release:
- ```console
- $ curl -O https://nodejs.org/dist/vx.y.z/SHASUMS256.txt.sig
- ```
Then use gpg --verify SHASUMS256.txt.sig SHASUMS256.txt to verify
the file's signature.
Building Node.js
See BUILDING.md for instructions on how to build Node.js from
source and a list of supported platforms.
Security
For information on reporting security vulnerabilities in Node.js, see
Contributing to Node.js
[Contributing to the project][]
[Working Groups][]
[Strategic initiatives][]
[Technical values and prioritization][]
Current project team members
For information about the governance of the Node.js project, see
<!-- node-core-utils and find-inactive-tsc.mjs depend on the format of the TSC
list. If the format changes, those utilities need to be tested and
updated. -->
TSC (Technical Steering Committee)
aduh95 -
**Antoine du Hamel** <BridgeAR -
**Ruben Bridgewater** <ChALkeR -
**Сковорода Никита Андреевич** <cjihrig -
**Colin Ihrig** <fhinkel -
**Franziska Hinkelmann** <jasnell -
**James M Snell** <mcollina -
**Matteo Collina** <mhdawson -
**Michael Dawson** <ronag -
**Robert Nagy** <targos -
**Michaël Zasso** <tniessen -
**Tobias Nießen** <Trott -
**Rich Trott** <Emeriti
TSC emeriti
addaleax -
**Anna Henningsen** <danbev -
**Daniel Bevenius** <gibfahn -
**Gibson Fahnestock** <indutny -
**Fedor Indutny** <isaacs -
**Isaac Z. Schlueter** <joshgav -
**Josh Gavant** <mscdex -
**Brian White** <nebrius -
**Bryan Hughes** <ofrobots -
**Ali Ijaz Sheikh** <rvagg -
**Rod Vagg** <shigeki -
**Shigeki Ohtsu** <<!-- node-core-utils and find-inactive-collaborators.mjs depend on the format
of the collaborator list. If the format changes, those utilities need to be
tested and updated. -->
Collaborators
addaleax -
**Anna Henningsen** <aduh95 -
**Antoine du Hamel** <anonrig -
**Yagiz Nizipli** <bcoe -
**Ben Coe** <bengl -
**Bryan English** <bmeck -
**Bradley Farias** <bnb -
**Tierney Cyren** <BridgeAR -
**Ruben Bridgewater** <cclauss -
**Christian Clauss** <ChALkeR -
**Сковорода Никита Андреевич** <cjihrig -
**Colin Ihrig** <cola119 -
**Kohei Ueno** <daeyeon -
**Daeyeon Jeong** <danbev -
**Daniel Bevenius** <devnexen -
**David Carlier** <devsnek -
**Gus Caplan** <edsadr -
**Adrian Estrada** <fhinkel -
**Franziska Hinkelmann** <F3n67u -
**Feng Yu** <Flarna -
**Gerhard Stöbich** <iansu -
**Ian Sutherland** <indutny -
**Fedor Indutny** <jasnell -
**James M Snell** <jkrems -
**Jan Krems** <joesepi -
**Joe Sepi** <JungMinu -
**Minwoo Jung** <kuriyosh -
**Yoshiki Kurihara** <Leko -
**Shingo Inoue** <lpinca -
**Luigi Pinca** <Lxxyx -
**Zijian Liu** <marsonya -
**Akhil Marsonya** <mcollina -
**Matteo Collina** <meixg -
**Xuguang Mei** <Mesteery -
**Mestery** <mhdawson -
**Michael Dawson** <MoLow -
**Moshe Atlow** <mscdex -
**Brian White** <oyyd -
**Ouyang Yadong** <panva -
**Filip Skokan** <Qard -
**Stephen Belanger** <rickyes -
**Ricky Zhou** <<0x19951125@gmail.com>> (he/him)ronag -
**Robert Nagy** <rvagg -
**Rod Vagg** <shisama -
**Masashi Hirano** <srl295 -
**Steven R Loomis** <sxa -
**Stewart X Addison** <targos -
**Michaël Zasso** <tniessen -
**Tobias Nießen** <trivikr -
**Trivikram Kamat** <Trott -
**Rich Trott** <watilde -
**Daijiro Wachi** <XadillaX -
**Khaidi Chu** <ZYSzys -
**Yongsheng Zhang** <Emeriti
<!-- find-inactive-collaborators.mjs depends on the format of the emeriti list.
If the format changes, those utilities need to be tested and updated. -->
Collaborator emeriti
ak239 -
**Aleksei Koziatinskii** <andrasq -
**Andras** <AnnaMag -
**Anna M. Kedzierska** <aqrln -
**Alexey Orlenko** <bmeurer -
**Benedikt Meurer** <bzoz -
**Bartosz Sosnowski** <davisjam -
**Jamie Davis** <dmabupt -
**Xu Meng** <eugeneo -
**Eugene Ostroukhov** <firedfox -
**Daniel Wang** <gdams -
**George Adams** <geek -
**Wyatt Preul** <gibfahn -
**Gibson Fahnestock** <glentiki -
**Glen Keane** <hashseed -
**Yang Guo** <hiroppy -
**Yuta Hiroto** <iarna -
**Rebecca Turner** <imran-iq -
**Imran Iqbal** <imyller -
**Ilkka Myller** <isaacs -
**Isaac Z. Schlueter** <jasongin -
**Jason Ginchereau** <jdalton -
**John-David Dalton** <joshgav -
**Josh Gavant** <kfarnung -
**Kyle Farnung** <lance -
**Lance Ball** <lxe -
**Aleksey Smolenchuk** <micnic -
**Nicu Micleușanu** <mikeal -
**Mikeal Rogers** <monsanto -
**Christopher Monsanto** <MoonBall -
**Chen Gang** <ofrobots -
**Ali Ijaz Sheikh** <Olegas -
**Oleg Elifantiev** <othiym23 -
**Forrest L Norvell** <phillipj -
**Phillip Johnsen** <pmq20 -
**Minqi Pan** <refack -
**Refael Ackermann (רפאל פלחי)** <rexagod -
**Pranshu Srivastava** <rlidwka -
**Alex Kocharin** <rmg -
**Ryan Graham** <romankl -
**Roman Klauke** <rubys -
**Sam Ruby** <saghul -
**Saúl Ibarra Corretgé** <seishun -
**Nikolai Vavilov** <shigeki -
**Shigeki Ohtsu** <stefanmb -
**Stefan Budeanu** <tellnes -
**Christian Tellnes** <thlorenz -
**Thorsten Lorenz** <tunniclm -
**Mike Tunnicliffe** <watson -
**Thomas Watson** <yhwang -
**Yihong Wang** <yorkie -
**Yorkie Liu** <Collaborators follow the Collaborator Guide in
maintaining the Node.js project.
Triagers
daeyeon -
**Daeyeon Jeong** <F3n67u -
**Feng Yu** <kvakil -
**Keyhan Vakil** <marsonya -
**Akhil Marsonya** <meixg -
**Xuguang Mei** <Mesteery -
**Mestery** <MoLow -
**Moshe Atlow** <Triagers follow the Triage Guide when
responding to new issues.
Release keys
Primary GPG keys for Node.js Releasers (some Releasers sign with subkeys):
4ED778F539E3634C779C87C6D7062848A1AB005C
* **Bryan English** < 141F07595B7B3FFE74309A937405533BE57C7D57
* **Danielle Adams** < 74F12602B6F1C4E913FAA37AD3A89613643B6201
* **Juan José Arboleda** < 61FC681DFB92A079F1685E77973F295594EC4689
* **Michaël Zasso** < 8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600
* **Myles Borins** < C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8
* **RafaelGSS** < 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4
* **Richard Lau** < C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C
* **Ruy Adorno** < 108F52B48DB57BB0CC439B2997B01419BD92F80A
To import the full set of trusted release keys (including subkeys possibly used
to sign releases):
- ``` sh
- gpg --keyserver hkps://keys.openpgp.org --recv-keys 4ED778F539E3634C779C87C6D7062848A1AB005C
- gpg --keyserver hkps://keys.openpgp.org --recv-keys 141F07595B7B3FFE74309A937405533BE57C7D57
- gpg --keyserver hkps://keys.openpgp.org --recv-keys 74F12602B6F1C4E913FAA37AD3A89613643B6201
- gpg --keyserver hkps://keys.openpgp.org --recv-keys 61FC681DFB92A079F1685E77973F295594EC4689
- gpg --keyserver hkps://keys.openpgp.org --recv-keys 8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600
- gpg --keyserver hkps://keys.openpgp.org --recv-keys C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8
- gpg --keyserver hkps://keys.openpgp.org --recv-keys 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4
- gpg --keyserver hkps://keys.openpgp.org --recv-keys C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C
- gpg --keyserver hkps://keys.openpgp.org --recv-keys 108F52B48DB57BB0CC439B2997B01419BD92F80A
- ```
See Verifying binaries for how to use these keys to
verify a downloaded file.
Other keys used to sign some previous releases
9554F04D7259F04124DE6B476D5A82AC7E37093B
* **Colin Ihrig** < 94AE36675C464D64BAFA68DD7434390BDBE9B9C5
* **Danielle Adams** < 1C050899334244A8AF75E53792EF661D867B9DFA
* **Evan Lucas** < B9AE9905FFD7803F25714661B63B535A4C206CA9
* **Gibson Fahnestock** < 77984A986EBC2AA786BC0F66B01FBB92821C587A
* **Isaac Z. Schlueter** < 93C7E9E91B49E432C2F75674B0A78B0A6C481CF6
* **Italo A. Casas** < 56730D5401028683275BD23C23EFEFE93C4CFFFE
* **James M Snell** < 71DCFD284A79C3B38668286BC97EC7A07EDE3FC1
* **Jeremiah Senkpiel** < FD3A5288F042B6850C66B31F09FE44734EB7990E
* **Julien Gilli** < 114F43EE0176B71C7BC219DD50A3051F888C628D
* **Rod Vagg** < DD8F2338BAE7501E3DD5AC78C273792F7D83545D
* **Ruben Bridgewater** < A48C2BEE680E841632CD4E44F07496B3EB3C1762
* **Shelley Vohr** < B9E2F5981AA6E0CD28160D9FF13993A75599653C
* **Timothy J Fontaine** < 7937DFD2AB06298B2293C3187D33FF9D0246406D
Security release stewards
When possible, the commitment to take slots in the
security release steward rotation is made by companies in order
to ensure individuals who act as security stewards have the
support and recognition from their employer to be able to
prioritize security releases. Security release stewards manage security
releases on a rotation basis as outlined in the
Datadog
bengl -
**Bryan English** <NearForm
**Rafael Gonzaga** <NodeSource
**Juan José Arboleda** <Platformatic
mcollina -
**Matteo Collina** <Red Hat and IBM
joesepi -
**Joe Sepi** < mhdawson -
**Michael Dawson** <License
Node.js is available under the
MIT license. Node.js also includes
external libraries that are available under a variety of licenses. See
LICENSE for the full
license text.
[Code of Conduct]: https://github.com/nodejs/admin/blob/HEAD/CODE_OF_CONDUCT.md
[Contributing to the project]: CONTRIBUTING.md
[Node.js website]: https://nodejs.org/
[OpenJS Foundation]: https://openjsf.org/
[Strategic initiatives]: doc/contributing/strategic-initiatives.md
[Technical values and prioritization]: doc/contributing/technical-values.md
[Working Groups]: https://github.com/nodejs/TSC/blob/HEAD/WORKING_GROUPS.md
