# Install node with Homebrew, apk, chocolatey, apt, dnf, MacPorts, Nix, pacman, scoop, winget, zypper Open-source, cross-platform JavaScript runtime environment. Version 26.4.0 via Homebrew; verified 2026-07-07. ## Install ```sh sudo av install brew:node ``` ## Agent safety answer node executes JavaScript tooling that commonly reads project secrets and launches npm package workflows. - **Credential access:** Reads environment variables, dotenv files, npm tokens, and project config reachable to scripts. - **Remote mutation:** Can run deploy scripts, API clients, and arbitrary package scripts. - **Publish/artifact risk:** Can build and publish npm packages or generated application bundles. - **Recommended control:** Gate package publishing and lifecycle scripts; scan project secrets before agent runs. - **Agent-use guidance:** Allow test/build commands after scanning; require approval for publish, install scripts, and deploy actions. Additional install commands: ### macOS - Homebrew (100%): ```sh brew install node ``` Evidence: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install nodejs24 ``` Evidence: MacPorts ports tree: lang/nodejs24/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - apk (92%): ```sh sudo apk add nodejs ``` Evidence: Alpine Linux edge package indexes: nodejs from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz - Debian apt (92%): ```sh sudo apt install nodejs ``` Evidence: Debian stable package indexes: nodejs from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - dnf (92%): ```sh sudo dnf install nodejs24 ``` Evidence: Fedora Rawhide package metadata: nodejs24 from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#nodejs ``` Evidence: nixpkgs package indexes: nodejs from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix - pacman (92%): ```sh sudo pacman -S nodejs ``` Evidence: Arch Linux sync databases: nodejs from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz - zypper (92%): ```sh sudo zypper install nodejs24 ``` Evidence: openSUSE Tumbleweed package metadata: nodejs24 from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst ### Windows - Chocolatey (92%): ```sh choco install nodejs ``` Evidence: Chocolatey community package catalog: nodejs from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','nexus-repository' - Scoop (92%): ```sh scoop install main/nodejs ``` Evidence: Scoop official bucket manifest trees: bucket/nodejs.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 - winget (92%): ```sh winget install --id OpenJS.NodeJS -e ``` Evidence: Windows Package Manager source index: OpenJS.NodeJS from https://cdn.winget.microsoft.com/cache/source.msix ## Package facts - **Package key:** brew:node - **Package manager:** Homebrew - **Package manager page:** - **Version:** 26.4.0 - **Source summary:** Open-source, cross-platform JavaScript runtime environment - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** MIT - **Source archive:** - **Last updated:** 2026-07-07T08:46:39Z - **Generated:** 2026-07-08T07:18:31+00:00 ## Executables - node (cli) - npm (cli) - npx (cli) - node (alias) - npm (alias) - npx (alias) ## Dependencies - ada-url - brotli - c-ares - hdrhistogram_c - icu4c@78 - libffi - libnghttp2 - libnghttp3 - libngtcp2 - libuv - llhttp - merve - nbytes - openssl@3 - simdjson - sqlite - uvwasi - zstd ## Build dependencies - pkgconf - python@3.14 ## Uses from macOS - python ## Install behavior - Post-install hook: defined - Caveats: Single Executable Application is disabled as it doesn't work with shared libnode. Temporal support is disabled as it doesn't work with shared ICU library. - Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Freshness - Page generated: 2026-07-08 - Package-manager version: 26.4.0 - Package-manager updated: 2026-07-07 - Local data: ok - Upstream repository: https://nodejs.org/ - info: Release/tag comparison is only available for GitHub repositories. ## Project history and usage Node.js is the JavaScript runtime that made server-side and command-line JavaScript mainstream. The official Node.js about page describes it as an asynchronous event-driven runtime designed for scalable network applications, with HTTP as a first-class feature and an event loop hidden behind ordinary JavaScript program execution. ### Project history Ryan Dahl created Node.js around 2009 to run JavaScript outside the browser for network servers and other I/O-heavy programs. The runtime combined Google's V8 JavaScript engine with an event loop and low-level I/O APIs, giving web developers a single language across browser code, servers, tooling, and package scripts. The early project was stewarded by Joyent, then hit a governance crisis in 2014 when prominent contributors forked it as io.js. The Node.js Foundation announced on 14 September 2015 that Node.js v4.0.0 combined the Node.js and io.js codebases under the foundation, added a long-term support plan, and moved the project to regular semver-based release lines. The Node.js Foundation and JS Foundation announced their merger into the OpenJS Foundation on 12 March 2019. That put Node.js under the broader vendor-neutral JavaScript foundation that also houses projects such as Node-RED. ### Adoption history Node.js adoption grew because it solved several developer and operational needs at once: fast startup for scripts, non-blocking network servers, JSON-native APIs, a giant npm ecosystem, and one language for browser and server teams. The 2015 foundation announcement said Node.js was used by tens of thousands of organizations in more than 200 countries and had more than 2 million downloads per month. Homebrew's `node` formula is the rolling mainstream macOS/Linux package for the latest Node major. The Formulae page lists aliases including `node.js`, `node@26`, `nodejs`, and `npm`, and reports 3,116,013 installs over 365 days with 2,515,719 installs on request. Within Homebrew, that makes it the high-volume default path for developers who want Node, npm, and npx without a separate version manager. ### How it is used Homebrew users install the rolling formula with `brew install node`, then get `node`, `npm`, and `npx`. The formula is convenient for system-level CLI tools, local development, and build dependencies, while teams that need exact per-project versions often layer nvm, fnm, asdf, volta, nodenv, or Homebrew's versioned `node@` formulas on top of that ecosystem. Package nerds care about Node's release train because C++ addons, ESM/CommonJS behavior, OpenSSL, V8, npm, Corepack, test runner behavior, and web-platform APIs can all change across majors. The official release page explains that major versions historically enter Current for six months, even-numbered releases become LTS, and production applications should use Active LTS or Maintenance LTS releases. ### Why package nerds care For package-manager data, `brew:node` is the anchor package. It is both a runtime and a build input for huge parts of the JavaScript, frontend, Electron, language-server, and CLI-tooling worlds. Its adoption stats often reflect not only developers explicitly wanting Node, but also downstream packages whose builds or runtime scripts need Node available. ### Timeline - 2009: Ryan Dahl creates Node.js and presents the early runtime publicly. - 2014: io.js fork forms during the Node.js governance dispute. - 2015-09-14: Node.js v4.0.0 reunifies Node.js and io.js under the Node.js Foundation and introduces the modern LTS direction. - 2019-03-12: Node.js Foundation and JS Foundation announce the OpenJS Foundation merger. - 2026: Homebrew's rolling `node` formula tracks Node 26.x and lists node@24, node@22, node@20, and node@18 as adjacent versioned formulas. ### Related projects - npm - npx - Corepack - V8 - libuv - OpenJS Foundation - io.js ### Sources - - - - - - ## Security Notes doc example: JavaScript runtime and package ecosystem. - **Geiger risk:** yellow / high - doc example: JavaScript runtime and package ecosystem - **Approval gate rules:** 7 ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: ~/.npmrc - Windows: %UserProfile%\.npmrc ## Credential files - Unix: ~/.npmrc - Windows: %UserProfile%\.npmrc ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** node - **Aliases:** node.js, node@26, nodejs, npm - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Other Package-Manager Records - Debian apt - nodejs - 20.19.2+dfsg-1+deb13u2: normalized package name match | Debian stable package indexes: nodejs from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | evented I/O for V8 javascript - runtime executable | https://nodejs.org/ - Nix - nodejs: normalized package name match | nixpkgs package indexes: nodejs from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix - Ubuntu apt - nodejs - 18.19.1+dfsg-6ubuntu5: normalized package name match | Ubuntu 24.04 LTS package indexes: nodejs from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | evented I/O for V8 javascript - runtime executable | https://nodejs.org/ - apk - nodejs - 24.16.0-r0: normalized package name match | Alpine Linux edge package indexes: nodejs from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | JavaScript runtime built on V8 engine - LTS version | https://nodejs.org/ - dnf - nodejs24 - 24.15.0-1.fc45: normalized package name match | Fedora Rawhide package metadata: nodejs24 from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | JavaScript runtime | https://nodejs.org - pacman - nodejs - 26.2.0-1: normalized package name match | Arch Linux sync databases: nodejs from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | Evented I/O for V8 javascript ("Current" release) | https://nodejs.org/ - zypper - nodejs24 - 24.14.1-2.2: normalized package name match | openSUSE Tumbleweed package metadata: nodejs24 from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst | Evented I/O for V8 JavaScript | https://nodejs.org - MacPorts - nodejs24: normalized package name match | MacPorts ports tree: lang/nodejs24/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 - Chocolatey - nodejs: normalized package name match | Chocolatey community package catalog: nodejs from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','nexus-repository' - Scoop - main/nodejs: normalized package name match | Scoop official bucket manifest trees: bucket/nodejs.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 - winget - OpenJS.NodeJS: normalized package name match | Windows Package Manager source index: OpenJS.NodeJS from https://cdn.winget.microsoft.com/cache/source.msix - Debian apt - npm - 9.2.0~ds1-3: installed executable or alias match | Debian stable package indexes: npm from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | package manager for Node.js | https://docs.npmjs.com/ - Ubuntu apt - npm - 9.2.0~ds1-2: installed executable or alias match | Ubuntu 24.04 LTS package indexes: npm from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | package manager for Node.js | https://docs.npmjs.com/ - apk - npm - 11.12.1-r0: installed executable or alias match | Alpine Linux edge package indexes: npm from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | The package manager for JavaScript | https://www.npmjs.com/ - apk - npm-bash-completion - 11.12.1-r0: installed executable or alias match | Alpine Linux edge package indexes: npm-bash-completion from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Bash completions for npm | https://www.npmjs.com/ - apk - npm-doc - 11.12.1-r0: installed executable or alias match | Alpine Linux edge package indexes: npm-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | The package manager for JavaScript (documentation) | https://www.npmjs.com/ ## Related links - [Package publisher tools](https://www.automicvault.com/pkg/package-publishers/) - Belongs to a package publishing or registry command family. - [Secret-risk packages](https://www.automicvault.com/pkg/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals. - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Language runtime packages](https://www.automicvault.com/pkg/language-runtime-packages/) - Matched language runtime, compiler, or interpreter metadata. - [ada-url](https://www.automicvault.com/pkg/brew/ada-url/) - Runtime dependency declared by Homebrew. - [brotli](https://www.automicvault.com/pkg/brew/brotli/) - Runtime dependency declared by Homebrew. - [c-ares](https://www.automicvault.com/pkg/brew/c-ares/) - Runtime dependency declared by Homebrew. - [pkgconf](https://www.automicvault.com/pkg/brew/pkgconf/) - Build dependency declared by Homebrew. - [python@3.14](https://www.automicvault.com/pkg/brew/python-3-14/) - Build dependency declared by Homebrew. - [action-docs](https://www.automicvault.com/pkg/brew/action-docs/) - Popular package that depends on this formula. - [actions-languageserver](https://www.automicvault.com/pkg/brew/actions-languageserver/) - Popular package that depends on this formula. - [actions-up](https://www.automicvault.com/pkg/brew/actions-up/) - Popular package that depends on this formula. - [addons-linter](https://www.automicvault.com/pkg/brew/addons-linter/) - Popular package that depends on this formula. - [agent-browser](https://www.automicvault.com/pkg/brew/agent-browser/) - Popular package that depends on this formula. - [aicommit2](https://www.automicvault.com/pkg/brew/aicommit2/) - Popular package that depends on this formula. - [aicommits](https://www.automicvault.com/pkg/brew/aicommits/) - Popular package that depends on this formula. - [fibjs](https://www.automicvault.com/pkg/brew/fibjs/) - Shares av.db curated category or tags: cli, javascript, language-runtime, runtime, server-side. - [deno](https://www.automicvault.com/pkg/brew/deno/) - Shares av.db curated category or tags: cli, javascript, language-runtime, runtime. - [duktape](https://www.automicvault.com/pkg/brew/duktape/) - Shares av.db curated category or tags: cli, javascript, language-runtime, runtime. - [ringojs](https://www.automicvault.com/pkg/brew/ringojs/) - Shares av.db curated category or tags: cli, javascript, language-runtime, runtime. - [v8](https://www.automicvault.com/pkg/brew/v8/) - Shares av.db curated category or tags: cli, javascript, language-runtime, runtime. - [boa](https://www.automicvault.com/pkg/brew/boa/) - Shares av.db curated category or tags: cli, javascript, language-runtime. - [gjs](https://www.automicvault.com/pkg/brew/gjs/) - Shares av.db curated category or tags: cli, javascript, language-runtime. - [jerryscript](https://www.automicvault.com/pkg/brew/jerryscript/) - Shares av.db curated category or tags: cli, javascript, language-runtime. - [dotnet](https://www.automicvault.com/pkg/brew/dotnet/) - Local package facts share a topical domain. Shared terms: brotli, cli, icu4c, icu4c-78, language. - [node](https://www.automicvault.com/pkg/npm/node/) - Same normalized package name in another local ecosystem. ## Combined YAML source View the package source record on GitHub. [combined/node.yml](https://github.com/automic-vault/db/blob/main/combined/node.yml) ## Sources - Nucleus package database - Geiger risk classifier - approval-gate seed metadata - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph - curated agent safety answer