Node.js

Node.js is an open-source, cross-platform JavaScript runtime environment.

For information on using Node.js, see the Node.js website.

The Node.js project uses an open governance model. The OpenJS Foundation provides support for the project.

Contributors are expected to act in a collaborative manner to move the project forward. We encourage the constructive exchange of contrary opinions and compromise. The TSC reserves the right to limit or block contributors who repeatedly act in ways that discourage, exhaust, or otherwise negatively affect other participants.

This project has a Code of Conduct.

Table of contents

• Support
• Release types
  • Download
    • Current and LTS releases
    • Nightly releases
    • API documentation
  • Verifying binaries
• Building Node.js
• Security
• Contributing to Node.js
• Current project team members
  • TSC (Technical Steering Committee)
  • Collaborators
  • Triagers
  • Release keys
• License

Support

Looking for help? Check out the instructions for getting support.

Release types

• Current: Under active development. Code for the…

Node Version Manager

Table of Contents

• Intro
• About
• Installing and Updating
  • Install & Update Script
    • Additional Notes
    • Troubleshooting on Linux
    • Troubleshooting on macOS
    • Ansible
  • Verify Installation
  • Important Notes
  • Git Install
  • Manual Install
  • Manual Upgrade
• Usage
  • Long-term Support
  • Migrating Global Packages While Installing
  • Default Global Packages From File While Installing
  • io.js
  • System Version of Node
  • Listing Versions
  • Setting Custom Colors
    • Persisting custom colors
    • Suppressing colorized output
    • Restoring PATH
    • Set default node version
    • Use a mirror of node binaries
  • .nvmrc
  • Deeper Shell Integration
    • bash
      • Automatically call nvm use
    • zsh
      • Calling nvm use automatically in a directory with a .nvmrc file
    • fish
      • Calling nvm use automatically in a directory with a .nvmrc file
• Running Tests
• Environment variables
• Bash Completion
  • Usage
• Compatibility Issues
• Installing nvm on Alpine Linux
  • Alpine Linux 3.13+
  • Alpine Linux 3.5 - 3.12
• Uninstalling / Removal
  • Manual Uninstall
• Docker For Development Environment
• Problems
• macOS Troubleshooting
• WSL Troubleshooting
• Maintainers
• License
• Copyright notice

NVM for Windows

Sponsors

Overview

Manage multiple installations of node.js on a Windows computer.

tl;dr Similar (not identical) to nvm, but for Windows. Has an installer. Download Now!

This has always been a node version manager, not an io.js manager, so there is no back-support for io.js. Node…

The Art of Node

An introduction to Node.js

This document is intended for readers who know at least a little bit of a couple of things:

• a scripting language like JavaScript, Ruby, Python, Perl, etc. If you aren't a programmer yet then it is probably easier to start by reading JavaScript for Cats. 🐈
• git and github. These are the open source collaboration tools that people in the node community use to share modules. You just need to know the basics. Here are three great intro tutorials: 1, 2, 3

Table of contents

• Learn node interactively
• Understanding node
• Core modules
• Callbacks
• Events
• Streams
• Modules and npm
• Client side development with npm
• Going with the grain

Learn node interactively

In addition to reading this guide it's super important to also bust out your favorite text editor and actually write some node code. I always find that when I…

nodemon

nodemon is a tool that helps develop Node.js based applications by automatically restarting the node application when file changes in the directory are detected.

nodemon does not require any additional changes to your code or method of development. nodemon is a replacement wrapper for node. To use nodemon, replace the word node on the command line when executing your script.

Installation

Either through cloning with git or by using npm (the recommended way):

npm install -g nodemon # or using yarn: yarn global add nodemon

And nodemon will be installed globally to your system path.

You can also install nodemon as a development dependency:

npm install --save-dev nodemon # or using yarn: yarn add nodemon -D

With a local installation, nodemon will not be available in your system path or you can't use it directly from the command line. Instead, the local installation of nodemon can be…

Awesome npm

Awesome npm resources and tips

npm is a package manager for the JavaScript programming language and comes bundled in the Node.js runtime.

Please read the contribution guidelines before contributing.

Contents

• Articles
• Tools
• Packages
• Clients
• Tips
• FAQ
• Community
• Documentation
• Support
• Related

Articles

• Small focused modules
• Unix philosophy and Node.js - Write programs that do one thing and do it well.
• Writing small modules
• Semver: A Primer (Must read!)
• Semver: Tilde and Caret
• Offline installation of npm packages
• Task automation with npm run
• How to use npm as a build tool
• Install npm packages globally without sudo on macOS and Linux
• Optimizing the footprint of an npm package
• The Art of Node - An introduction to Node.js and client-side development with npm.
• Why npm scripts? - An introduction to npm scripts with common packages and scripts, as well as a boilerplate project.

Tools

Web

• npms - Superb package search with…

Contents

• Tools
  • Web Framework Hardening
  • Static Code Analysis
  • Dynamic Application Security Testing
  • Input/Output Validation
  • Secure Composition
  • CSRF
  • Vulnerabilities and Security Advisories
  • Security Hardening
• Security Incidents
• Educational
  • Hacking Playground
  • Articles
  • Research Papers
  • Books
  • Roadmaps
• Companies

Tools

Web Framework Hardening

• Helmet - Helmet helps you secure your Express apps by setting various HTTP headers.
• koa-helmet - koa-helmet helps you secure your Koa apps by setting various HTTP headers.
• blankie - CSP plugin for hapi.
• fastify-helmet - fastify-helmet helps you secure your fastify apps by setting important secutiry headers.
• nuxt-security - 🛡 Security Module for Nuxt based on OWASP Top 10 and Helmet.

Static Code Analysis

• eslint-plugin-security - ESLint rules for Node Security. This project will help identify potential security hotspots, but finds a lot of false positives which need triage by a human.
• tslint-plugin-security - TSLint…

Node.js

The official Node.js docker image, made with love by the node community.

Table of Contents

• What is Node.js?
• How to use this image
  • Create a Dockerfile in your Node.js app project
  • Best Practices
  • Run a single Node.js script
  • Verbosity
    • Dockerfile
    • Docker Run
    • NPM run
• Image Variants
  • node:<version>
  • node:alpine
  • node:buster
  • node:bullseye
  • node:slim
• License
• Supported Docker versions
• Supported Node.js versions
• Governance and Current Members
  • Docker Working Group Members
  • Docker Working Group Collaborators
  • Emeritus
    • Docker Working Group Members

What is Node.js?

Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices.

See: http://nodejs.org

How to use this image

Create a Dockerfile in your Node.js app project

# specify the node base image with your desired version node:<version>
FROM node:16
# replace this with

Microsoft + Node.js Guidelines

Microsoft ❤️ Node.js!

We work hard to contribute to the Node.js community and we want to make sure your experience is as seamless as possible. In particular, our goals here are to:

• make it easier for people using Microsoft services and technologies to get started on the right foot with Node.js
• consolidate Microsoft's Node.js offerings in a centralized place to make it easier for you to find information
• communicate status on key issues we're addressing and collect feedback from the Node.js community on how we can do better.
• provide a forum to connect with various teams at Microsoft working on improving the Node.js experience.

Note that this is not intended to be a comprehensive set of recommendations. Rather it's meant to be a helpful set of content that makes it easier to avoid any potential gotchas, and the beginning of what we expect to be an…

How I write backends

From late 2012 to the present I have been writing backends (server-side code) for web applications. This document summarizes many aspects of how I write these pieces of code.

I'm writing this lore down for three purposes:

1. Share it with you.
2. Systematize it for future reference and improvement.
3. Learn from your feedback.

Your questions and observations are very welcome!

If you must sting, please also be nice. But above all, please be accurate.

I'd like to thank everyone who joined in the HN discussion of this document and pointed out or stimulated many interesting points that I had missed. I'm humbled and grateful for the tremendously positive and constructive feedback I received. Y'all rock.

This is all public domain; take whatever you find useful.

The approach

My approach to backends (as with code in general) is to iteratively strive for simplicity. This approach - and…

Node.js Best Practices

Follow us on Twitter! @nodepractices

Read in a different language: CN, FR, BR, RU, PL, JA, EU (ES, HE, KR and TR in progress! )

🚀 We have an official Node.js starter - Practica.js. Use it to generate a new solution skeleton with all the practices baked inside. Or just it to learn by code examples

Latest Best Practices and News

• ✨ 80,000 stars: Blushing, surprised and proud!

• 🔖 New menu and tags: Our menu is collapsible now and includes #tags. New visitors can read #strategic items first. Returning visitors can focus on #new content. Seniors can filter for #advanced items. Courtesy of the one and only Rubek Joshi

• 👨‍👩‍👧‍👦 New family member!: A new repository joins our family - Node.js Integration Tests Best Practices ✨. It includes 40+ best practices for…

Tags