Node.js

Node.js at a glance

Node.js is the ubiquitous JavaScript runtime under a vast range of server applications, tools and build pipelines. The project ships releases on Current and LTS lines, with security releases (often coordinated across supported lines) whenever runtime or dependency flaws are found.

For admins Node is usually a runtime beneath an application, whose requirements set the version. Security fixes — including in the bundled OpenSSL and the HTTP stack — should be applied promptly by moving the Node version in servers, containers and CI. Pick an LTS line for production and track its end-of-life date; after that, gaps stay open. Applications bundle their npm dependencies, which carry their own supply-chain risk — audit them. Test the application before moving a major Node version.