The Node.js team recently released Node v20 (Current release). Node v20 will be ready for full production deployments after entering the long-term support (LTS) stage in October. Key features include an experimental permission model for improved security and building Node applications into standalone executables.
Developers can opt in the new permission API with a –experimental-permission flag that when enabled restricts access to all available permissions. Currently, the available permissions configure access to the file system (e.g., –allow-fs-read, –allow-fs-write flags), the spawning of child processes (–allow-child-process flag), and the creation of worker threads (–allow-worker flag). For instance, –allow-fs-write=* –allow-fs-read=/tmp/ will allow FileSystemRead access to the /tmp/ folder and allow all the FileSystemWrite operations.
