diff --git a/.github/workflows/codesee-arch-diagram.yml b/.github/workflows/codesee-arch-diagram.yml
deleted file mode 100644
index 80f58e6..0000000
--- a/.github/workflows/codesee-arch-diagram.yml
+++ /dev/null
@@ -1,23 +0,0 @@
-# This workflow was added by CodeSee. Learn more at https://codesee.io/
-# This is v2.0 of this workflow file
-on:
-  push:
-    branches:
-      - staging
-  pull_request_target:
-    types: [opened, synchronize, reopened]
-
-name: CodeSee
-
-permissions: read-all
-
-jobs:
-  codesee:
-    runs-on: ubuntu-latest
-    continue-on-error: true
-    name: Analyze the repo with CodeSee
-    steps:
-      - uses: Codesee-io/codesee-action@v2
-        with:
-          codesee-token: ${{ secrets.CODESEE_ARCH_DIAG_API_TOKEN }}
-          codesee-url: https://app.codesee.io
diff --git a/.github/workflows/feature.yml b/.github/workflows/feature.yml
new file mode 100644
index 0000000..27d8e41
--- /dev/null
+++ b/.github/workflows/feature.yml
@@ -0,0 +1,20 @@
+name: "CI / Feature"
+
+on:
+  push:
+    branches:
+      - feature*
+  workflow_dispatch:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  use-library-js-feature:
+    permissions:
+      packages: read
+      contents: read
+      actions: write
+      checks: write
+    uses: MatrixAI/.github/.github/workflows/library-js-feature.yml@feature-actions
diff --git a/.github/workflows/staging.yml b/.github/workflows/staging.yml
new file mode 100644
index 0000000..325c58d
--- /dev/null
+++ b/.github/workflows/staging.yml
@@ -0,0 +1,28 @@
+name: "CI / Staging"
+
+on:
+  push:
+    branches:
+      - staging
+  workflow_dispatch:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  use-library-js-staging:
+    permissions:
+      packages: read
+      contents: write
+      actions: write
+      checks: write
+      pull-requests: write
+    uses: MatrixAI/.github/.github/workflows/library-js-staging.yml@feature-actions
+    secrets:
+      GH_TOKEN: ${{ secrets.GH_TOKEN }}
+      GIT_AUTHOR_EMAIL: ${{ secrets.GIT_AUTHOR_EMAIL }}
+      GIT_AUTHOR_NAME: ${{ secrets.GIT_AUTHOR_NAME }}
+      GIT_COMMITTER_EMAIL: ${{ secrets.GIT_COMMITTER_EMAIL }}
+      GIT_COMMITTER_NAME: ${{ secrets.GIT_COMMITTER_NAME }}
+
diff --git a/.github/workflows/tag.yml b/.github/workflows/tag.yml
new file mode 100644
index 0000000..e62a817
--- /dev/null
+++ b/.github/workflows/tag.yml
@@ -0,0 +1,15 @@
+name: "CI / Tag"
+
+on:
+  push:
+    tags:
+      - 'v*.*.*'
+  workflow_dispatch:
+
+jobs:
+  use-library-js-tag:
+    permissions:
+      packages: read
+      contents: read
+      actions: write
+    uses: MatrixAI/.github/.github/workflows/library-js-tag.yml@feature-actions
diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
deleted file mode 100644
index d450e97..0000000
--- a/.gitlab-ci.yml
+++ /dev/null
@@ -1,307 +0,0 @@
-workflow:
-  rules:
-    # Disable merge request pipelines
-    - if: $CI_MERGE_REQUEST_ID
-      when: never
-    - when: always
-
-variables:
-  GIT_SUBMODULE_STRATEGY: recursive
-  GH_PROJECT_PATH: "MatrixAI/${CI_PROJECT_NAME}"
-  GH_PROJECT_URL: "https://${GITHUB_TOKEN}@github.com/${GH_PROJECT_PATH}.git"
-  # Cache .npm
-  npm_config_cache: "${CI_PROJECT_DIR}/tmp/npm"
-  # Prefer offline node module installation
-  npm_config_prefer_offline: "true"
-  # Homebrew cache only used by macos runner
-  HOMEBREW_CACHE: "${CI_PROJECT_DIR}/tmp/Homebrew"
-
-default:
-  interruptible: true
-  before_script:
-    # Replace this in windows runners that use powershell
-    # with `mkdir -Force "$CI_PROJECT_DIR/tmp"`
-    - mkdir -p "$CI_PROJECT_DIR/tmp"
-
-# Cached directories shared between jobs & pipelines per-branch per-runner
-cache:
-  key: $CI_COMMIT_REF_SLUG
-  # Preserve cache even if job fails
-  when: 'always'
-  paths:
-    - ./tmp/npm/
-    # Homebrew cache is only used by the macos runner
-    - ./tmp/Homebrew
-    # Chocolatey cache is only used by the windows runner
-    - ./tmp/chocolatey/
-    # `jest` cache is configured in jest.config.js
-    - ./tmp/jest/
-
-stages:
-  - check       # Linting, unit tests
-  - build       # Cross-platform library compilation, unit tests
-  - integration # Cross-platform application bundling, integration tests, and pre-release
-  - release     # Cross-platform distribution and deployment
-
-image: registry.gitlab.com/matrixai/engineering/maintenance/gitlab-runner
-
-check:lint:
-  stage: check
-  needs: []
-  script:
-    - >
-      nix-shell --arg ci true --run $'
-      npm run lint;
-      npm run lint-shell;
-      '
-  rules:
-    # Runs on feature and staging commits and ignores version commits
-    - if: $CI_COMMIT_BRANCH =~ /^(?:feature.*|staging)$/ && $CI_COMMIT_TITLE !~ /^[0-9]+\.[0-9]+\.[0-9]+(?:-.*[0-9]+)?$/
-    # Runs on tag pipeline where the tag is a prerelease or release version
-    - if: $CI_COMMIT_TAG =~ /^v[0-9]+\.[0-9]+\.[0-9]+(?:-.*[0-9]+)?$/
-    # Manually run on commits other than master and ignore version commits
-    - if: $CI_COMMIT_BRANCH && $CI_COMMIT_BRANCH != 'master' && $CI_COMMIT_TITLE !~ /^[0-9]+\.[0-9]+\.[0-9]+(?:-.*[0-9]+)?$/
-      when: manual
-
-check:test:
-  stage: check
-  needs: []
-  script:
-    - >
-      nix-shell --arg ci true --run $'
-      npm test -- --ci --coverage;
-      '
-  artifacts:
-    when: always
-    reports:
-      junit:
-        - ./tmp/junit/junit.xml
-      coverage_report:
-        coverage_format: cobertura
-        path: ./tmp/coverage/cobertura-coverage.xml
-  coverage: '/All files[^|]*\|[^|]*\s+([\d\.]+)/'
-  rules:
-    # Runs on feature commits and ignores version commits
-    - if: $CI_COMMIT_BRANCH =~ /^feature.*$/ && $CI_COMMIT_TITLE !~ /^[0-9]+\.[0-9]+\.[0-9]+(?:-.*[0-9]+)?$/
-    # Manually run on commits other than master and staging and ignore version commits
-    - if: $CI_COMMIT_BRANCH && $CI_COMMIT_BRANCH !~ /^(?:master|staging)$/ && $CI_COMMIT_TITLE !~ /^[0-9]+\.[0-9]+\.[0-9]+(?:-.*[0-9]+)?$/
-      when: manual
-
-build:merge:
-  stage: build
-  needs: []
-  allow_failure: true
-  script:
-    # Required for `gh pr create`
-    - git remote add upstream "$GH_PROJECT_URL"
-    - >
-      nix-shell --arg ci true --run $'
-      gh pr create \
-        --head staging \
-        --base master \
-        --title "ci: merge staging to master" \
-        --body "This is an automatic PR generated by the pipeline CI/CD. This will be automatically fast-forward merged if successful." \
-        --assignee "@me" \
-        --no-maintainer-edit \
-        --repo "$GH_PROJECT_PATH" || true;
-      printf "Pipeline Attempt on ${CI_PIPELINE_ID} for ${CI_COMMIT_SHA}\n\n${CI_PIPELINE_URL}" \
-      | gh pr comment staging \
-        --body-file - \
-        --repo "$GH_PROJECT_PATH";
-      '
-  rules:
-    # Runs on staging commits and ignores version commits
-    - if: $CI_COMMIT_BRANCH == 'staging' && $CI_COMMIT_TITLE !~ /^[0-9]+\.[0-9]+\.[0-9]+(?:-.*[0-9]+)?$/
-    # Runs on tag pipeline where the tag is a prerelease or release version
-    - if: $CI_COMMIT_TAG =~ /^v[0-9]+\.[0-9]+\.[0-9]+(?:-.*[0-9]+)?$/
-
-build:dist:
-  stage: build
-  needs: []
-  script:
-    - >
-      nix-shell --arg ci true --run $'
-      npm run build --verbose;
-      '
-  artifacts:
-    when: always
-    paths:
-      - ./dist
-  rules:
-    # Runs on staging commits and ignores version commits
-    - if: $CI_COMMIT_BRANCH == 'staging' && $CI_COMMIT_TITLE !~ /^[0-9]+\.[0-9]+\.[0-9]+(?:-.*[0-9]+)?$/
-    # Runs on tag pipeline where the tag is a prerelease or release version
-    - if: $CI_COMMIT_TAG =~ /^v[0-9]+\.[0-9]+\.[0-9]+(?:-.*[0-9]+)?$/
-
-build:linux:
-  stage: build
-  needs: []
-  script:
-    - >
-      nix-shell --arg ci true --run $'
-      npm test -- --ci --coverage;
-      npm run bench;
-      '
-  artifacts:
-    when: always
-    reports:
-      junit:
-        - ./tmp/junit/junit.xml
-      coverage_report:
-        coverage_format: cobertura
-        path: ./tmp/coverage/cobertura-coverage.xml
-      metrics: ./benches/results/metrics.txt
-  coverage: '/All files[^|]*\|[^|]*\s+([\d\.]+)/'
-  rules:
-    # Runs on staging commits and ignores version commits
-    - if: $CI_COMMIT_BRANCH == 'staging' && $CI_COMMIT_TITLE !~ /^[0-9]+\.[0-9]+\.[0-9]+(?:-.*[0-9]+)?$/
-    # Runs on tag pipeline where the tag is a prerelease or release version
-    - if: $CI_COMMIT_TAG =~ /^v[0-9]+\.[0-9]+\.[0-9]+(?:-.*[0-9]+)?$/
-
-build:windows:
-  stage: build
-  needs: []
-  tags:
-    - windows
-  before_script:
-    - mkdir -Force "$CI_PROJECT_DIR/tmp"
-  script:
-    - .\scripts\choco-install.ps1
-    - refreshenv
-    - npm install --ignore-scripts
-    - $env:Path = "$(npm root)\.bin;" + $env:Path
-    - npm test -- --ci --coverage
-    - npm run bench
-  artifacts:
-    when: always
-    reports:
-      junit:
-        - ./tmp/junit/junit.xml
-      coverage_report:
-        coverage_format: cobertura
-        path: ./tmp/coverage/cobertura-coverage.xml
-      metrics: ./benches/results/metrics.txt
-  coverage: '/All files[^|]*\|[^|]*\s+([\d\.]+)/'
-  rules:
-    # Runs on staging commits and ignores version commits
-    - if: $CI_COMMIT_BRANCH == 'staging' && $CI_COMMIT_TITLE !~ /^[0-9]+\.[0-9]+\.[0-9]+(?:-.*[0-9]+)?$/
-    # Runs on tag pipeline where the tag is a prerelease or release version
-    - if: $CI_COMMIT_TAG =~ /^v[0-9]+\.[0-9]+\.[0-9]+(?:-.*[0-9]+)?$/
-
-build:macos:
-  stage: build
-  needs: []
-  tags:
-    - saas-macos-medium-m1
-  image: macos-12-xcode-14
-  script:
-    - eval "$(brew shellenv)"
-    - ./scripts/brew-install.sh
-    - hash -r
-    - npm install --ignore-scripts
-    - export PATH="$(npm root)/.bin:$PATH"
-    - npm test -- --ci --coverage
-    - npm run bench
-  artifacts:
-    when: always
-    reports:
-      junit:
-        - ./tmp/junit/junit.xml
-      coverage_report:
-        coverage_format: cobertura
-        path: ./tmp/coverage/cobertura-coverage.xml
-      metrics: ./benches/results/metrics.txt
-  coverage: '/All files[^|]*\|[^|]*\s+([\d\.]+)/'
-  rules:
-    # Runs on staging commits and ignores version commits
-    - if: $CI_COMMIT_BRANCH == 'staging' && $CI_COMMIT_TITLE !~ /^[0-9]+\.[0-9]+\.[0-9]+(?:-.*[0-9]+)?$/
-    # Runs on tag pipeline where the tag is a prerelease or release version
-    - if: $CI_COMMIT_TAG =~ /^v[0-9]+\.[0-9]+\.[0-9]+(?:-.*[0-9]+)?$/
-
-build:prerelease:
-  stage: build
-  needs:
-    - build:dist
-    - build:linux
-    - build:windows
-    - build:macos
-  # Don't interrupt publishing job
-  interruptible: false
-  script:
-    - echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" > ./.npmrc
-    - echo 'Publishing library prerelease'
-    - >
-      nix-shell --arg ci true --run $'
-      npm publish --tag prerelease --access public;
-      '
-  after_script:
-    - rm -f ./.npmrc
-  rules:
-    # Only runs on tag pipeline where the tag is a prerelease version
-    # This requires dependencies to also run on tag pipeline
-    # However version tag comes with a version commit
-    # Dependencies must not run on the version commit
-    - if: $CI_COMMIT_TAG =~ /^v[0-9]+\.[0-9]+\.[0-9]+-.*[0-9]+$/
-
-integration:merge:
-  stage: integration
-  needs:
-    - build:merge
-    - job: build:linux
-      optional: true
-    - job: build:windows
-      optional: true
-    - job: build:macos
-      optional: true
-  # Requires mutual exclusion
-  resource_group: integration:merge
-  allow_failure: true
-  variables:
-    # Ensure that CI/CD is fetching all commits
-    # this is necessary to checkout origin/master
-    # and to also merge origin/staging
-    GIT_DEPTH: 0
-  script:
-    - >
-      nix-shell --arg ci true --run $'
-      printf "Pipeline Succeeded on ${CI_PIPELINE_ID} for ${CI_COMMIT_SHA}\n\n${CI_PIPELINE_URL}" \
-      | gh pr comment staging \
-        --body-file - \
-        --repo "$GH_PROJECT_PATH";
-      '
-    - git remote add upstream "$GH_PROJECT_URL"
-    - git checkout origin/master
-    # Merge up to the current commit (not the latest commit)
-    - git merge --ff-only "$CI_COMMIT_SHA"
-    - git push upstream HEAD:master
-  rules:
-    # Runs on staging commits and ignores version commits
-    - if: $CI_COMMIT_BRANCH == 'staging' && $CI_COMMIT_TITLE !~ /^[0-9]+\.[0-9]+\.[0-9]+(?:-.*[0-9]+)?$/
-    # Runs on tag pipeline where the tag is a prerelease or release version
-    - if: $CI_COMMIT_TAG =~ /^v[0-9]+\.[0-9]+\.[0-9]+(?:-.*[0-9]+)?$/
-
-release:distribution:
-  stage: release
-  needs:
-    - build:dist
-    - build:linux
-    - build:windows
-    - build:macos
-    - integration:merge
-  # Don't interrupt publishing job
-  interruptible: false
-  script:
-    - echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" > ./.npmrc
-    - echo 'Publishing library'
-    - >
-      nix-shell --arg ci true --run $'
-      npm publish --access public;
-      '
-  after_script:
-    - rm -f ./.npmrc
-  rules:
-    # Only runs on tag pipeline where the tag is a release version
-    # This requires dependencies to also run on tag pipeline
-    # However version tag comes with a version commit
-    # Dependencies must not run on the version commit
-    - if: $CI_COMMIT_TAG =~ /^v[0-9]+\.[0-9]+\.[0-9]+$/
diff --git a/README.md b/README.md
index a0cac4b..d73e636 100644
--- a/README.md
+++ b/README.md
@@ -1,8 +1,5 @@
 # js-workers
 
-staging:[![pipeline status](https://gitlab.com/MatrixAI/open-source/js-workers/badges/staging/pipeline.svg)](https://gitlab.com/MatrixAI/open-source/js-workers/commits/staging)
-master:[![pipeline status](https://gitlab.com/MatrixAI/open-source/js-workers/badges/master/pipeline.svg)](https://gitlab.com/MatrixAI/open-source/js-workers/commits/master)
-
 Workers is the library for multi-threading in MatrixAI's JavaScript/TypeScript applications. It is based on top of threads.js.
 
 Currently no support for Mobile OSes.
@@ -50,7 +47,7 @@ npm install --save @matrixai/workers
 
 ## Development
 
-Run `nix-shell`, and once you're inside, you can use:
+Run `nix develop`, and once you're inside, you can use:
 
 ```sh
 # install (or reinstall packages from package.json)
diff --git a/flake.lock b/flake.lock
new file mode 100644
index 0000000..3697cc5
--- /dev/null
+++ b/flake.lock
@@ -0,0 +1,60 @@
+{
+  "nodes": {
+    "flake-utils": {
+      "inputs": {
+        "systems": "systems"
+      },
+      "locked": {
+        "lastModified": 1731533236,
+        "narHash": "sha256-l0KFg5HjrsfsO/JpG+r7fRrqm12kzFHyUHqHCVpMMbI=",
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "rev": "11707dc2f618dd54ca8739b309ec4fc024de578b",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "type": "github"
+      }
+    },
+    "nixpkgs": {
+      "locked": {
+        "lastModified": 1736817698,
+        "narHash": "sha256-1m+JP9RUsbeLVv/tF1DX3Ew9Vl/fatXnlh/g5k3jcSk=",
+        "owner": "nixos",
+        "repo": "nixpkgs",
+        "rev": "2b1fca3296ddd1602d2c4f104a4050e006f4b0cb",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nixos",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "root": {
+      "inputs": {
+        "flake-utils": "flake-utils",
+        "nixpkgs": "nixpkgs"
+      }
+    },
+    "systems": {
+      "locked": {
+        "lastModified": 1681028828,
+        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "owner": "nix-systems",
+        "repo": "default",
+        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default",
+        "type": "github"
+      }
+    }
+  },
+  "root": "root",
+  "version": 7
+}
diff --git a/flake.nix b/flake.nix
new file mode 100644
index 0000000..e7b95d7
--- /dev/null
+++ b/flake.nix
@@ -0,0 +1,47 @@
+{
+  inputs = {
+    nixpkgs.url = "github:nixos/nixpkgs";
+    flake-utils.url = "github:numtide/flake-utils";
+  };
+
+  outputs = { nixpkgs, flake-utils, ... }:
+    flake-utils.lib.eachDefaultSystem (system:
+      let
+        pkgs = nixpkgs.legacyPackages.${system};
+        shell = { ci ? false }:
+          with pkgs;
+          pkgs.mkShell {
+            nativeBuildInputs = [
+              nodejs_20
+              shellcheck
+              gitAndTools.gh
+            ];
+            PKG_IGNORE_TAG = 1;
+            shellHook = ''
+              echo "Entering $(npm pkg get name)"
+              set -o allexport
+              . <(polykey secrets env js-timer)
+              set +o allexport
+              set -v
+              ${lib.optionalString ci ''
+                set -o errexit
+                set -o nounset
+                set -o pipefail
+                shopt -s inherit_errexit
+              ''}
+              mkdir --parents "$(pwd)/tmp"
+
+              export PATH="$(pwd)/dist/bin:$(npm root)/.bin:$PATH"
+
+              npm install --ignore-scripts
+
+              set +v
+            '';
+          };
+      in {
+        devShells = {
+          default = shell { ci = false; };
+          ci = shell { ci = true; };
+        };
+      });
+}
diff --git a/pkgs.nix b/pkgs.nix
deleted file mode 100644
index 2997ae2..0000000
--- a/pkgs.nix
+++ /dev/null
@@ -1,4 +0,0 @@
-import (
-  let rev = "ea5234e7073d5f44728c499192544a84244bf35a"; in
-  builtins.fetchTarball "https://github.com/NixOS/nixpkgs/archive/${rev}.tar.gz"
-)
diff --git a/shell.nix b/shell.nix
deleted file mode 100644
index 54ec565..0000000
--- a/shell.nix
+++ /dev/null
@@ -1,34 +0,0 @@
-{ pkgs ? import ./pkgs.nix {}, ci ? false }:
-
-with pkgs;
-mkShell {
-  nativeBuildInputs = [
-    nodejs_20
-    shellcheck
-    gitAndTools.gh
-  ];
-  shellHook = ''
-    echo "Entering $(npm pkg get name)"
-    set -o allexport
-    . ./.env
-    set +o allexport
-    set -v
-    ${
-      lib.optionalString ci
-      ''
-      set -o errexit
-      set -o nounset
-      set -o pipefail
-      shopt -s inherit_errexit
-      ''
-    }
-    mkdir --parents "$(pwd)/tmp"
-
-    # Built executables and NPM executables
-    export PATH="$(pwd)/dist/bin:$(npm root)/.bin:$PATH"
-
-    npm install --ignore-scripts
-
-    set +v
-  '';
-}