# lang/nodejs20 - The NetBSD Packages Collection

V8 JavaScript for clients and servers

    Node.js is an evented I/O framework for the V8 JavaScript engine. It is
    intended for writing scalable network programs such as web servers.

    This package holds the latest release.

- Source version: `nodejs-20.15.0`
- Maintainer: pkgsrc-users AT NetBSD.org
- Website: https://nodejs.org/
- License: mit
- Package history: cvs, hg, git

## Build dependencies

devel/py-packaging sysutils/lockf lang/python311 lang/python311 pkgtools/mktools shells/bash devel/gmake devel/pkgconf pkgtools/cwrappers

## Runtime dependencies

archivers/brotli devel/libuv devel/libuv net/libcares textproc/icu www/nghttp2 www/nghttp2 net/ngtcp2 www/nghttp3 net/libcares textproc/icu www/nghttp2 net/ngtcp2 www/nghttp3

## Binary packages

OS | Architecture | Version
--- | --- | ---
NetBSD 10.0 | aarch64 | nodejs-20.11.1.tgz
NetBSD 10.0 | aarch64 | nodejs-20.10.0.tgz
NetBSD 10.0 | i386 | nodejs-20.11.1.tgz
NetBSD 10.0 | i386 | nodejs-20.10.0.tgz
NetBSD 10.0 | i386 | nodejs-20.14.0.tgz
NetBSD 10.0 | x86_64 | nodejs-20.11.1.tgz
NetBSD 10.0 | x86_64 | nodejs-20.10.0.tgz
NetBSD 10.0 | x86_64 | nodejs-20.14.0.tgz
NetBSD 9.0 | aarch64 | nodejs-20.11.1.tgz
NetBSD 9.0 | aarch64 | nodejs-20.10.0.tgz
NetBSD 9.0 | i386 | nodejs-20.14.0.tgz
NetBSD 9.0 | i386 | nodejs-20.11.1.tgz
NetBSD 9.0 | x86_64 | nodejs-20.14.0.tgz
NetBSD 9.0 | x86_64 | nodejs-20.10.0.tgz
NetBSD 9.0 | x86_64 | nodejs-20.11.1.tgz
NetBSD 9.3 | x86_64 | nodejs-20.15.0.tgz
NetBSD 9.3 | x86_64 | nodejs-20.15.0.tgz

Binary packages can be installed with the high-level tool pkgin (which can be installed with pkg_add) or pkg_add(1) (installed by default). The NetBSD packages collection is also designed to permit easy installation from source.

## Available build options

openssl
  Enable OpenSSL support.

## Known vulnerabilities

- a open denial-of-service vulnerability
- a open denial-of-service vulnerability
- a open arbitrary-command-injection vulnerability

The pkg_admin audit command locates any installed package which has been mentioned in security advisories as having vulnerabilities.

Please note the vulnerabilities database might not be fully accurate, and not every bug is exploitable with every configuration.

Problem reports, updates or suggestions for this package should be reported with send-pr.