Paul Krill
Editor at Large

Node.js 6 taps V8 update for more speed, security

news
Apr 26, 20162 mins

The server-side JavaScript platform gets a new version of Google's V8 JavaScript engine and more standards compliance

Node.js, the popular server-side JavaScript platform, moves to a version 6 release today, focusing on performance and security improvements as well as getting nearly a full dose of compliance with the most recent JavaScript standard specification.

Version 6 of Node.js is four times faster than Node.js v4, which is the latest deployment release line. “Imports [of code modules] and startup time [are] dramatically faster than it used to be,” Node.js Foundation Community Manager Mikeal Rogers said. The process for finding files has been streamlined, said James Snell, a member of the Node core team.

The latest version also features Google’s V8 5.0 JavaScript engine, which improves support for the ECMAScript 2015 (ES6) specification underlying JavaScript. “In general, we’ve gone from [complying with] about 58 percent of ES6 to about 93 percent of ES6,” Rogers said. New capabilities include default function parameters and REST parameters, for more easily expressing what a function is supposed to do. “These are the kinds of features that languages like Python have had for a long time,” he said.

For security, a Buffer API in version 6 will reduce the risk of bugs and vulnerabilities finding their way into applications, via a constructor method for building buffer instances. The zero-fill-buffers command flag, meanwhile, lets developers use older modules that have not been updated to use this API. Also, V8’s math.random implementation for generating random numbers is more secure, and it’s now easier to work with file systems that use multiple character encodings, such as Linux.

Version 6 becomes the Current release line, turning into the LTS (Long Term Support) release this fall. Version 5 will be maintained for a few more months, and version 4, the current LTS release, goes to maintenance mode in a year, with only critical bugs, security fixes, and documentation updates permitted. The Foundation advises users to transition from v4 to v6 in October, when v6 becomes the LTS release.

Paul Krill

Paul Krill is editor at large at InfoWorld. Paul has been covering computer technology as a news and feature reporter for more than 35 years, including 30 years at InfoWorld. He has specialized in coverage of software development tools and technologies since the 1990s, and he continues to lead InfoWorld’s news coverage of software development platforms including Java and .NET and programming languages including JavaScript, TypeScript, PHP, Python, Ruby, Rust, and Go. Long trusted as a reporter who prioritizes accuracy, integrity, and the best interests of readers, Paul is sought out by technology companies and industry organizations who want to reach InfoWorld’s audience of software developers and other information technology professionals. Paul has won a “Best Technology News Coverage” award from IDG.

More from this author