# node 25.8.2

Node.js JavaScript runtime ✨🐢🚀✨

Snapshot of gominimal/pkgs commit `edab88007b5c136ac47498006de71b97f6cf2605` (pushed 2026-07-28T21:02:50.000Z).

## Install

```sh
min add node
```

## Direct advisories

None at this commit.

## Transitive advisories

4 advisories inherited through runtime dependencies:

- GHSA-p84g-9fv8-52qw (LOW) via lief
- CVE-2026-58055 (MEDIUM) via nghttp2
- CVE-2026-5435 (HIGH) via glibc
- CVE-2026-6238 (MEDIUM) via glibc

## Dependencies

- Build (5): base, make, pkgconf, python, toolchain
- Runtime (14): coreutils, openssl, c-ares, icu, lief, libuv, zlib, sqlite, nghttp2, nghttp3, ngtcp2, zstd, gtest, glibc

## Scorecard

| Category | Score | Band |
| --- | --- | --- |
| supply-chain | 45 | low |
| advisories | 25 | low |
| quality | 75 | mid |
| maintenance | 100 | perfect |
| licence | 90 | good |

## Links

- Homepage: https://nodejs.org
- Package page (HTML): https://minimal.dev/pkgs/node
- JSON API (floats latest): https://minimal.dev/api/pkgs/node.json
- SBOM (CycloneDX 1.5): https://minimal.dev/api/pkgs/node/sbom.json