Go to file
Dimitrie Hoekstra 3df161c3bc
Add package-lock.json for reproducible dependency chains
- Remove package-lock.json from .gitignore
- Add validated package-lock.json (Node 20, 1003 packages)
- Update CI workflow to use npm ci instead of npm install
- Update README development instructions to use npm ci

This ensures all developers and CI get identical dependency trees,
protecting against npm supply chain attacks where compromised patch
versions could automatically propagate through semver ranges.

Closes #5424
2026-01-07 16:15:12 +01:00
.github Add package-lock.json for reproducible dependency chains 2026-01-07 16:15:12 +01:00
packages/node_modules Merge pull request #5355 from GogoVega/improve-next-previous-tab-action 2026-01-05 17:38:32 +00:00
scripts Bump for 4.0.5 2024-10-10 11:05:08 +01:00
test Fix typo in test case of status node 2026-01-04 16:19:13 +09:00
.gitattributes Prevent github from suppressing diffs 2018-09-24 22:02:18 +01:00
.gitignore Add package-lock.json for reproducible dependency chains 2026-01-07 16:15:12 +01:00
.jshintrc fix to allow es11 for jshint check 2022-11-07 10:42:07 +09:00
API.md Update api docs header 2021-04-27 17:30:30 +01:00
CHANGELOG.md Bump for 4.1.2 2025-12-03 15:50:47 +00:00
CITATION.cff add citation file 2024-08-31 04:32:01 +02:00
CODE_OF_CONDUCT.md Add CoC.md 2016-04-07 21:51:12 +01:00
CONTRIBUTING.md Update CONTRIBUTING.md 2023-09-18 21:03:46 +01:00
Gruntfile.js Update jquery 2025-06-26 10:05:21 +01:00
LICENSE Update top-level copyright statements 2020-09-29 20:28:15 +01:00
README.md Add package-lock.json for reproducible dependency chains 2026-01-07 16:15:12 +01:00
SECURITY.md docs: add security escalation policy 2025-09-15 15:07:17 +02:00
jsdoc.json More api documentation updates 2019-01-28 14:40:42 +00:00
nodemon.json Fix grunt dev via better ndoemon ignore rules 2025-01-15 10:32:10 +00:00
package-lock.json Add package-lock.json for reproducible dependency chains 2026-01-07 16:15:12 +01:00
package.json Update body-parser 2026-01-05 17:14:49 +00:00

README.md

License: Apache 2.0 Build Status

Node-RED Forum on Discourse Node-RED GitHub Organisation Followers Slack

Low-code programming for event-driven applications


Node-RED Library Nodes Node-RED Library Flows Node-RED Library Collections



Quick Start

Check out https://nodered.org/docs/getting-started/ for full instructions on getting started.

  1. sudo npm install -g --unsafe-perm node-red
  2. node-red
  3. Open http://localhost:1880

[!NOTE] More documentation can be found here. For further help, or general discussion, please join the Node-RED Forum or Node-RED Slack.

Development

If you want to run the latest code from git, here's how to get started:

  1. Clone the code:

     git clone https://github.com/node-red/node-red.git
     cd node-red
    
  2. Install the node-red dependencies

     npm ci
    
  3. Build the code

     npm run build
    
  4. Run

     npm start
    

Contributing

Before raising a pull-request, please read our contributing guide.

This project adheres to the Contributor Covenant 1.4. By participating, you are expected to uphold this code. Please report unacceptable behavior to any of the project's core team at team@nodered.org.

Star history

Star History Chart

Contributors

It is maintained by:

Node-RED is a project of the OpenJS Foundation. Copyright OpenJS Foundation and other contributors, https://openjsf.org under the Apache 2.0 license.