You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
description: Understand Node.js End-of-Life, what it means for security, tooling, and compliance, plus EOL version details and commercial support options.
4
+
description: Understand Node.js End-of-Life, what it means for security, tooling, and compliance, plus EoL version details and commercial support options.
5
5
---
6
6
7
-
# End-Of-Life (EOL)
7
+
# End-Of-Life (EoL)
8
8
9
9
## Why and how Node.js releases reach End-Of-Life
10
10
@@ -16,29 +16,29 @@ Major versions of Node.js are released, patched, and designated End-Of-Life on a
<span>Get security support for EOL versions</span>
19
+
<span>Get security support for EoL versions</span>
20
20
</Button>
21
21
</div>
22
22
23
23
[View the Node.js release schedule](/about/releases/).
24
24
25
-
## What Happens When a Release Line Reaches EOL
25
+
## What Happens When a Release Line Reaches EoL
26
26
27
27
When a version reaches End-Of-Life, it means that it will no longer receive updates, including security patches. This can leave applications running on these versions vulnerable to security issues and bugs that will never be fixed.
28
28
29
-
-**No more vulnerability fixes**: When new security releases reveal issues and patches in newer major lines, even if the same vulnerability affects EOL release lines, there will not be any new releases for them. Users still clinging on to EOL release lines and using affected code paths will be immediately vulnerable to attacks exploiting these disclosed vulnerabilities.
30
-
-**Tool-chain breakage**: EOL releases may no longer dynamically link to newer versions of the shared libraries they depend on, blocking or breaking system updates.
31
-
-**Ecosystem drift**: Many popular user-land packages drop support for EOL Node.js releases over time. When an application clings onto outdated packages, it may suffer from even more unfixed vulnerabilities and bugs, further drifting away from ecosystem norm.
29
+
-**No more vulnerability fixes**: When new security releases reveal issues and patches in newer major lines, even if the same vulnerability affects EoL release lines, there will not be any new releases for them. Users still clinging on to EoL release lines and using affected code paths will be immediately vulnerable to attacks exploiting these disclosed vulnerabilities.
30
+
-**Tool-chain breakage**: EoL releases may no longer dynamically link to newer versions of the shared libraries they depend on, blocking or breaking system updates.
31
+
-**Ecosystem drift**: Many popular user-land packages drop support for EoL Node.js releases over time. When an application clings onto outdated packages, it may suffer from even more unfixed vulnerabilities and bugs, further drifting away from ecosystem norm.
32
32
-**Compliance red flags**: Many industry audits forbid unmaintained runtimes.
33
33
34
-
## EOL Versions
34
+
## EoL Versions
35
35
36
36
<EOLReleaseTable />
37
37
38
38
## Commercial Support
39
39
40
-
Despite the obvious downsides of using EOL releases, in practice, organizations face constraints that prevent immediate upgrades, such as legacy codebases, compliance requirements, or complex dependency chains. Through the [OpenJS Foundation Ecosystem Sustainability Program](https://openjsf.org/blog/ecosystem-sustainability-program), Node.js is supported by HeroDevs and NodeSource to provide commercial services for security fixes.
40
+
Despite the obvious downsides of using EoL releases, in practice, organizations face constraints that prevent immediate upgrades, such as legacy codebases, compliance requirements, or complex dependency chains. Through the [OpenJS Foundation Ecosystem Sustainability Program](https://openjsf.org/blog/ecosystem-sustainability-program), Node.js is supported by HeroDevs and NodeSource to provide commercial services for security fixes.
41
41
42
42
HeroDevs provides [Never-Ending Support (NES)](https://nodejs.org/esp/herodevs) for Node.js versions past their official maintenance phase. This includes security patches, compliance assistance, and technical support to help bridge the gap while you plan your upgrade strategy.
43
43
44
-
Using EOL releases through commercial support should be viewed as a temporary solution—the goal should always be to upgrade to actively supported versions.
44
+
Using EoL releases through commercial support should be viewed as a temporary solution—the goal should always be to upgrade to actively supported versions.
Copy file name to clipboardExpand all lines: apps/site/pages/en/about/previous-releases.mdx
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -43,7 +43,7 @@ Installation methods designated as “Official” must meet the following requir
43
43
44
44
Community installation methods included on the self-service download page (located at /download) must also adhere to a minimum set of criteria:
45
45
46
-
-**Version Support:** Must support all currently supported, non-End-of-Life (EOL) Node.js versions.
46
+
-**Version Support:** Must support all currently supported, non-End-of-Life (EoL) Node.js versions.
47
47
-**OS Compatibility:** Must function on at least one officially supported Operating System (OS).
48
48
-**Broad OS Support:** Cannot be limited to a subset of OS distributions or versions.
49
49
- For example, an installation method claiming compatibility with “Windows” must function on “Windows 10”, “Windows 11”, and all their editions (including server versions).
0 commit comments