
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Stockfish.js is a WASM implementation by Nathan Rugg of the Stockfish chess engine, for Chess.com's in-browser engine.
Stockfish.js is currently updated to Stockfish 18.
This edition of Stockfish.js comes in five flavors:
stockfish-18.js & stockfish-18.wasmsetoption name Threads.stockfish-18-single.js & stockfish-18-single.wasmstockfish-18-lite.js & stockfish-18-lite.wasmstockfish-18-lite-single.js & stockfish-18-lite-single.wasmstockfish-18-asm.jsIt depends on your project, but most likely, you should use the lite single-threaded engine because it is fast and does not require any complicated setup. Although the full engine is objectively stronger, the lite engine is still far stronger than any human will ever be, and the full engine is so large that it can be very slow to load, which would cause a poor user experience.
The WASM Stockfish engines will run on all modern browsers (e.g., Chrome/Edge/Firefox/Opera/Safari) on supported systems (Windows 10+/macOS 11+/iOS 16+/Linux/Android), as well as currently supported versions of Node.js. For slightly older browsers, see the <a href=../../tree/Stockfish16>Stockfish.js 16 branch. The ASM-JS engine will run in essentially any browser/runtime that supports JavaScript. For an engine that supports chess variants (like 3-check and Crazyhouse), see the <a href=../../tree/Stockfish11>Stockfish.js 11 branch.
Stockfish.js is simply a raw engine. You'll need to bring the rest of the parts to make it into a working vehicle.
To learn how to use the engine in your own projects, see the examples folder. In particular, see examples/loadEngine.js for a sample implementation of how to load and run engines.
You only need to compile the engine if you want to make changes to the engine itself.
In order to compile the engine, you need to have emscripten 3.1.7 installed and in your path. Then you can compile Stockfish.js with the build script: ./build.js. See ./build.js --help for details. To build all flavors, run ./build.js --all.
See AUTHORS for more credits.
Stockfish.js (c) 2026, Chess.com, LLC GPLv3 (see Copying.txt)
FAQs
The Stockfish chess engine in Web Assembly (WASM)
The npm package stockfish receives a total of 10,458 weekly downloads. As such, stockfish popularity was classified as popular.
We found that stockfish demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.