SVR.JS on Node.JS 8.x and 9.x moving to LTS

SVR.JS on Node.JS 8.x and 9.x moving to LTS

SVR.JS 3.4.x will be last of supported SVR.JS versions for Node.JS 8.x and 9.x. If you are using these versions of Node.JS you will be able to use only SVR.JS LTS branch. SVR.JS will provide security updates and bug fixes for servers running those Node.JS versions until February 2024. No updates will be provided after that date.

Why has SVR.JS ended support for Node.JS 8.x and 9.x?

OpenJS Foundation ended official support for Node.JS 8.x in December 2019 and Node.JS 9.x in June 2018. Unsupported Node.JS versions receive no security updates and may have known vulnerabilities. With no official support from OpenJS Foundation, maintaining SVR.JS for obsolete Node.JS versions needs many constriants for SVR.JS authors and becomes dangerous for users.

Will switching to a different Node.JS-based server software keep me protected?

No. Most active Node.JS-based server software, including http-server (requires at least Node.JS 12.6.0), serve (requires at least Node.JS 14.0.0), and server.js (requires at least Node.JS 10.0.0) have already ended support for Node.JS 8.x and 9.x. Many other Node.JS-based server software, like svr (not SVR.JS; HTTP developement server), or ecstatic are no longer maintained, and may have unfixed security vulnerabilties.

Can I still use SVR.JS safely with Node.JS 8.x and 9.x?

SVR.JS authors are providing critical security updates through the SVR.JS LTS branch up until the EOL of SVR.JS 3.4.x, February 2024. After this, no security updates are provided and you are strongly encouraged to move to a supported version of Node.JS.

How can I get the newest features of SVR.JS?

If you want to keep your SVR.JS up to date, with all the latest feautres and updates, you need to upgrade your Node.JS to Node.JS 10.0.0 or newer. In some cases, Node.JS may stop supporting older platforms. After upgrading, server administrators can easily update SVR.JS and still run HTTP server.