100% Free Forever
AI-Powered Learning
Industry Expert Content
Certificates & Badges
Learn At Your Own Pace

JavaScript Modules (ESM/CJS) Cheat Sheet

JavaScript Modules (ESM/CJS) Cheat Sheet

Covers ES module import/export syntax, CommonJS require/module.exports, Node.js module configuration, and interoperability between the two systems.

1 PageIntermediateApr 12, 2026

ES Modules (ESM)

The standard, static module system.

javascript
// math.jsexport const PI = 3.14159;export function add(a, b) { return a + b; }export default function multiply(a, b) { return a * b; }// app.jsimport multiply, { PI, add } from "./math.js";   // Default + named importsimport * as math from "./math.js";                // Namespace importexport { add as sum };                             // Re-export with renameexport * from "./math.js";                          // Re-export everything// Note: ESM import paths require file extensions in Node.js (./math.js, not ./math)

CommonJS (CJS)

Node's original, synchronous module system.

javascript
// math.jsconst PI = 3.14159;function add(a, b) { return a + b; }module.exports = { PI, add };// or: module.exports.add = add;// or a single default-like export: module.exports = add;// app.jsconst { PI, add } = require("./math.js");const math = require("./math.js");    // Whole module object// require() is synchronous and can be called conditionally/anywhere in the fileif (process.env.DEBUG) {  const debug = require("./debug.js");}

Configuring Module Type in Node.js

package.json's "type" field decides how .js files are parsed.

json
// package.json{  "name": "my-app",  "type": "module",  "main": "index.js"}// "type": "module"    -> .js files are treated as ESM// "type": "commonjs"  (default) -> .js files are treated as CJS// Use .mjs to force ESM and .cjs to force CJS regardless of "type"

Interop Between ESM and CJS

Mixing the two systems has a few hard rules.

javascript
// Importing a CJS module from ESM: works, module.exports becomes the default exportimport pkg from "./legacy-cjs-module.js";const { someFn } = pkg;// Dynamic import works in both ESM and CJS, always returns a Promiseasync function load() {  const mod = await import("./math.js");  mod.add(1, 2);}// require()-ing an ESM file from CJS throws --// ESM cannot be require()'d directly, use dynamic import() instead

Key Differences

What actually changes between the two systems.

  • Loading- CJS require() is synchronous; ESM import is asynchronous under the hood
  • Hoisting- ESM imports are hoisted and resolved before any code runs; CJS require() executes inline
  • this at top level- undefined in ESM modules; module.exports in CJS modules
  • __dirname / __filename- Available in CJS; in ESM, derive them via import.meta.url instead
  • Tree-shaking- ESM's static import/export structure lets bundlers eliminate unused exports; CJS's dynamic nature mostly prevents it
  • Live bindings- ESM named exports are live references to the source; CJS exports are copied values at require time

Top-Level Await

ESM modules can await at the top level; the importing module waits for it to resolve before continuing.

javascript
// config.js (ESM only -- top-level await is a SyntaxError in CJS)const response = await fetch("https://api.example.com/config");export const config = await response.json();// app.jsimport { config } from "./config.js";// The engine suspends evaluation of app.js until config.js's top-level await settlesconsole.log(config);// Multiple sibling modules with top-level await run concurrently where possible,// but a chain of imports awaiting each other serializes -- watch for slow startup

package.json "exports" Field

Controls exactly which subpaths consumers may import and lets you serve different builds per condition.

json
{  "name": "my-lib",  "type": "module",  "exports": {    ".": {      "import": "./dist/index.mjs",      "require": "./dist/index.cjs",      "types": "./dist/index.d.ts"    },    "./plugin": "./dist/plugin.mjs",    "./package.json": "./package.json"  }}// Any subpath NOT listed here becomes unimportable from outside the package --// e.g. require("my-lib/dist/internal.js") throws ERR_PACKAGE_PATH_NOT_EXPORTED// even though the file physically exists on disk. This is "encapsulation".

Circular Dependencies: ESM vs CJS

Live bindings make ESM circular imports far more forgiving than CJS's snapshot-at-require-time exports.

javascript
// --- CJS: a.js and b.js require each other ---// a.jsconst b = require("./b.js");module.exports.value = "from a";console.log("b.value at require time:", b.value);   // often undefined -- b.js was mid-execution// --- ESM: a.mjs and b.mjs import each other ---// a.mjsimport { value as bValue } from "./b.mjs";export const value = "from a";console.log("b value:", bValue);   // TDZ error if accessed before b.mjs finishes initializing,                                     // but once both finish, bindings stay LIVE and stay in sync// ESM resolves the circular graph via hoisted bindings that update automatically as// the source module's exported variable changes -- CJS instead copies a value once.

Import Attributes for JSON Modules

Non-JS resources like JSON must declare their type explicitly when imported statically.

javascript
// Static import with an import attribute (Node 18.20+/22+, replaces the older "assert" syntax)import config from "./config.json" with { type: "json" };// Dynamic equivalentconst { default: config2 } = await import("./config.json", {  with: { type: "json" },});// Omitting the attribute throws:// TypeError [ERR_IMPORT_ATTRIBUTE_MISSING]: Module needs an import attribute of "type: json"// CJS has no equivalent restriction -- require("./config.json") just works,// which is one more reason JSON imports behave differently across the two systems.

Dual-Package & Resolution Gotchas

Pitfalls that show up once a package tries to support both module systems.

  • Dual package hazard- If a package is loaded once via require() and once via import(), you get TWO separate module instances with separate module-level state (e.g. two different singletons)
  • conditional exports order- In the "exports" map, condition keys are matched in the order they're written -- put "types" first, generic fallbacks last
  • createRequire- import { createRequire } from 'module'; const require = createRequire(import.meta.url); lets an ESM file call require() when truly needed
  • import.meta.url- ESM's replacement for __filename/__dirname; combine with new URL('./file', import.meta.url) or fileURLToPath()
  • instanceof across duplicated instances- A dual-loaded package's class exported from both entry points produces two distinct constructors, breaking instanceof checks between them
  • .mjs/.cjs override "type"- Regardless of package.json's "type" field, .mjs is always parsed as ESM and .cjs always as CommonJS
Pro Tip

Don't mix require() and import in the same file expecting them to behave identically -- if package.json has "type": "module", every .js file is parsed as ESM and require is undefined by default; use createRequire from 'module' if you truly need CJS require inside an ESM file.

Was this cheat sheet helpful?

Explore Topics

#JavaScriptModulesESMCJS#JavaScriptModulesESMCJSCheatSheet#Programming#Intermediate#ESModulesESM#CommonJSCJS#Configuring#Module#CheatSheet#SkillVeris

Frequently Asked Questions

21 categories · pick one to explore

Does SkillVeris have a tech blog, and what does it cover?
Yes, the SkillVeris blog has over 500 articles covering AI and machine learning, programming, web development, DevOps, cloud, security, databases and career guidance. Articles are practical and answer-first, and many use the Learn Through Hobbies approach, teaching technical concepts through cricket, music, gaming or cooking analogies. Everything is free to read.
What is the SkillVeris tech glossary and how big is it?
The SkillVeris glossary is a free reference of roughly 2,000-plus technology terms, each with a clear plain-language definition. It spans AI, programming, web, DevOps, cloud, security and database vocabulary, so whenever a lesson, article or job description uses jargon you do not recognise, the glossary gives you a fast, reliable answer.
Are the developer cheat sheets on SkillVeris free to download?
The cheat sheets are completely free to use, like everything else on SkillVeris. Each sheet condenses a language or tool into its essential syntax, commands and patterns for quick reference while coding. They are designed for rapid lookup during real work, complementing the deeper explanations found in study notes and courses.
Which programming references and cheat sheets are available?
Cheat sheets cover the platform's main domains, including programming languages, AI and ML tooling, web development, DevOps, cloud, security and databases, matching the topics of the 37 live courses. Each sheet lists related reading links and hashtags, so you can jump from a quick reference into fuller study notes or blog articles.
How do I find the meaning of a technical term quickly?
Search the SkillVeris glossary, which holds around 2,000-plus terms with concise, plain-language definitions. Each entry gets to the point in its first sentence, then links to related reading like blog posts or study notes for deeper context. It is faster and more consistent than sifting through scattered search results.
Is the SkillVeris blog good for beginners learning to code?
Yes, many blog articles are written specifically for beginners, and the Learn Through Hobbies style makes them unusually approachable: you might learn Python concepts through cricket or understand APIs through cooking. With 500-plus articles across skill levels, beginners can start with fundamentals and keep reading as they advance, entirely free.
Can cheat sheets replace full courses for learning a language?
No, cheat sheets are references, not teaching tools; they assume you already understand the concepts and just need syntax or commands fast. To actually learn a language, take a structured SkillVeris course with its 24–40 lessons and assessments, then keep the cheat sheet beside you while practising in Code Lab.
How often are new blog articles published on SkillVeris?
The blog grows regularly and already exceeds 500 articles, with new posts added as courses launch and technologies evolve. Topics track the platform's catalogue across AI, programming, web development, DevOps, cloud and security, so checking the Blog section periodically surfaces fresh tutorials, explainers and career-focused pieces, all free to read.
Does the glossary cover AI and machine learning terms?
Yes, AI and machine learning vocabulary is a major part of the roughly 2,000-plus term glossary, covering everything from foundational terms to modern concepts around LLMs, RAG and MLOps. Definitions are plain-language and answer-first, which helps when dense AI papers or course lessons throw unfamiliar jargon at you.
Are there cheat sheets for interview preparation?
Cheat sheets work well as interview-day refreshers because they compress syntax, commands and key concepts into scannable references. For dedicated preparation, combine them with the SkillVeris interview questions feature, which includes readiness scoring, plus study notes for depth. Reviewing a relevant cheat sheet just before an interview steadies recall under pressure.
Can I read the tech blog without signing up?
Yes, the blog is freely readable, and SkillVeris never charges for content. All 500-plus articles are open, covering tutorials, concept explainers and career advice. Creating a free account adds value elsewhere on the platform, like course progress tracking and certificates, but reading the blog requires no commitment at all.
How is the SkillVeris glossary different from Wikipedia?
The glossary is purpose-built for learners: definitions are short, plain-language and answer-first, sized for a quick lookup mid-lesson rather than a deep encyclopedic read. Entries also cross-link to related SkillVeris study notes, blog posts and courses, so a definition becomes a doorway into structured learning instead of a dead end.
Do blog articles use the Learn Through Hobbies method?
Many blog articles teach technical topics through hobby analogies, a hallmark of the SkillVeris blog, so you will find articles explaining programming through cricket, machine learning through music, or system design through cooking. The analogy is the teaching device; the article still delivers the real technical concept underneath.
Where can I find quick programming references while coding?
Open the SkillVeris cheat sheets, which are built exactly for that moment: compact, scannable references for syntax, commands and common patterns across languages and tools. Keep the relevant sheet in a browser tab while you work in Code Lab or your own editor, and dip into the glossary for terminology.
Is there a glossary entry for terms I meet in job descriptions?
Very likely yes, with roughly 2,000-plus terms across AI, programming, web, DevOps, cloud, security and databases, the glossary covers most jargon that appears in tech job descriptions. Decoding a listing this way helps you judge role fit honestly and prepares you to discuss those terms in interviews.
Are the blog articles written for the Indian tech audience?
The blog serves Indian learners plus a worldwide audience. Content stays globally relevant while acknowledging realities that matter in India, such as free access being essential for students and freshers, and career guidance that connects naturally to the SkillVeris jobs portal, which aggregates roles across India, UK, USA, Germany and Remote.
Can I suggest a topic for the blog or glossary?
SkillVeris content grows in response to what learners need, so feedback is welcome through the platform's support channels. If a term is missing from the glossary or a topic deserves an article, telling the team helps prioritise it. Meanwhile, the AI Mentor can answer the question immediately, 24/7, at any depth.
Do cheat sheets and glossary entries link to deeper learning?
Yes, every cheat sheet and glossary entry carries related reading links into study notes, blog articles and courses, plus concept hashtags for discovering similar content. This cross-linking means a thirty-second lookup can smoothly become a structured learning session whenever you decide you want more than a quick answer.
What makes SkillVeris programming references trustworthy?
The references are written to strict internal quality standards, kept consistent with the platform's 37 live courses, and never padded with invented statistics or hype. Definitions and cheat sheets are reviewed against the same content contracts that govern courses, and the answer-first style makes any inaccuracy easy to spot and correct.
How do the blog, glossary and cheat sheets fit into my learning routine?
Use them as satellites around your main course: read blog articles for context and motivation, hit the glossary the instant jargon appears, and keep cheat sheets open while coding. Together with study notes, Code Lab and the 24/7 AI Mentor, they turn passive reading into a complete, free learning system.

What Learners Say

Real journeys from the SkillVeris community — swipe for more.

SkillVeris taught me Python through Cricket. Now I’m building real projects and feeling confident!
Arjun S. · B.Tech Student
The best platform for hobby-based learning. Concepts finally stick.
Priya R. · Data Analyst
I went from zero coding to a portfolio of projects — all by learning through my love for gaming. Landed my first internship!
Kabir M. · CS Undergraduate
Trending Topics50 popular tags — tap to explore
Trending CoursesAll 37 free courses — tap to browse