Node.js 25 permission model: scope --allow-net and --allow-fs for production (2026)
The Node.js permission model gained --allow-net in v25 (October 2025). This guide shows how to scope file, network and process access in production, using the 2026 npm supply-chain attacks as motivation.
