View packages at a commit

Paste a `locked_commit` from your `minimal.toml`, or a recent commit from the list.

Back to search results
node owner avatar

node

Version: 26.12.1

Node.js JavaScript runtime ✨🐢🚀✨

Install package

min add node
Languagejavascriptjslinux

OpenSSF Score

OpenSSF Scorecard — node

Scored 0–10, as OpenSSF Scorecard reports them.N/A: not applicable or inconclusive.

Binary-Artifacts

Binaries present in source code

0
Branch-Protection

Branch protection is not maximal on development and all release branches

1
CI-Tests

18 out of 18 merged PRs checked by a CI test -- score normalized to 10

10
CII-Best-Practices

Badge detected: Passing

5
Code-Review

Found 19/30 approved changesets -- score normalized to 6

6
Contributors

Project has 118 contributing companies or organizations

10
Dangerous-Workflow

No dangerous workflow patterns detected

10
Dependency-Update-Tool

Update tool detected

10
Fuzzing

Project is fuzzed

10
License

License file detected

9
Maintained

30 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10

10
Packaging

Packaging workflow not detected

N/A
Pinned-Dependencies

Dependency not pinned by hash detected -- score normalized to 7

7
SAST

SAST tool detected but not run on all commits

7
Security-Policy

Security policy file detected

10
Signed-Releases

No releases found

N/A
Token-Permissions

Detected GitHub workflow tokens with excessive permissions

0
Vulnerabilities

124 existing vulnerabilities detected

0

Scored by OpenSSF Scorecard, from OpenSSF's weekly scan of public GitHub repositories.

nodejs/nodescanned

Last scored on

What is "node"?

Node.js JavaScript runtime ✨🐢🚀✨

How to use this package

Quick install

Installs the package into the current environment for this session. Use --build or --runtime to persist it as a build-time or runtime dependency.

min add node

Declare as a task dependency in minimal.toml

Listing the package under tasks.<name>.packages makes it available inside that task’s sandbox.

[tasks.dev]
packages = ["node"]

Build-time vs runtime

Choose build-time for tools needed during compilation, runtime for dynamic libraries loaded at runtime.

min add --build node
min add --runtime node
Compare versions
to

Dependencies (20)

Dependencies
NameVersionKind
base—build
c-ares1.34.9runtime
coreutils9.12runtime
gcc15.2.0runtime
glibc2.44runtime
gtest1.18.0runtime
icu78.3runtime
libuv1.53.0runtime
lief1.0.0runtime
make4.4.1build
nghttp21.70.0runtime
nghttp31.18.0runtime
ngtcp21.25.0runtime
openssl3.6.5runtime
pkgconf3.0.5build
pythonCVE:13.14.9build
sqlite3.54.0runtime
toolchain—build
zlibCVE:21.3.2runtime
zstd1.5.7runtime

No dependants

No other packages in the registry depend on this one.

  1. node v26.12.1c074ce7
    Diff
    Lines:+16 / -869Deps:20(-1)
    Released:
  2. node v26.10.0180b651
    Diff
    Lines:+915 / -2Deps:21(+1)
    Released:
  3. node v25.8.2f1dde19
    Diff
    Lines:+155 / -23Deps:20(+9)
    Released:
  4. node v24.9.0e3e0bf9
    Diff
    Lines:+121 / -11Deps:11(+11)
    Released:

No direct advisories

This package inherits 2 transitive advisories from its dependencies.

Build provenance

Loading provenance

For the signed record of what the build used, see the Provenance tab.

Software Bill of Materials — every package this build depends on
PackagesVersion
nodeROOT26.12.1
acl2.4.0
attr2.6.0
autoconf2.73
automake1.18.1
bash5.3
bash-bootstrap5.3
binutils2.47
bison3.8.2
bzip21.0.8
c-ares1.34.9
cmake4.4.2
coreutils9.12
curl8.23.0
diffutils3.12
expat2.9.0
file5.48
findutils4.11.0
flex2.6.4
gawk5.4.1
gawk-bootstrap5.4.1
gcc15.2.0
gdbm1.26
glibc2.44
gmp6.3.0
grep3.12
gtest1.18.0
gzip1.15
icu78.3
libcap2.78
libffi3.8.0
libidn22.3.8
libpsl0.23.3
libtool2.6.2
libunistring1.4.2
libuv1.53.0
lief1.0.0
linux_headers6.12.43
lz41.10.0
m41.4.21
make4.4.1
meson1.12.0
mpc1.4.1
mpfr4.2.2
ncurses6.6
nghttp21.70.0
nghttp31.18.0
ngtcp21.25.0
ninja1.13.2
openssl3.6.5
patch2.8
pcre210.49
perl5.44.0
pkgconf3.0.5
python3.14.9
readline8.3
sed4.10
setuptools84.2.1
sqlite3.54.0
tar1.35
tzdata2026e
util-linux2.42.4
xz5.8.4
zlib1.3.2
zstd1.5.7

Join the waitlist

Confirm your identity by email or GitHub.

or