Bookmarks (23) clear filters

npm v7.1.0 Released with Two Small New Features — Two new small but sweet features. We get a new command – npm set-script – which lets you create a task in the scripts section of package.json. npm exec now also triggers an interactive subshell for running installed binaries (in the same way npm run scripts can).

npm v7.0.9 Released — Bug fixes via dependency upgrades and start is now the default script when server.js is present.

npm v7.0.0 Beta 7 Released — Another week, another round of releases for the npm 7 beta. We featured the main news about npm 7 last week (so catch up with that if you need to) but the npm team are keen for you to test it out.

npm 6.14.8 Released — “A new v6 patch release is out with a few bug fixes from the community and dependency updates.”

npm's CTO: 'So Long, and Thanks for All The Packages!' — Ahmad Nassri was npm’s CTO but has now left. Here, he reflects on the past ten years of npm, the repo, the company, and the achievements of both.

npm Inc's Statement on the COVID-19 Crisis — There’s not a lot to report on here, but npm are confident in the robustness of the registry, their team, and their processes which is certainly reassuring. In other npm Inc news, they’ve also updated their privacy policy.

npm 6.14 Released — The main addition is support for multiple ‘funding’ entries for package maintainers to demonstrate multiple ways their work can be supported. 6.14.1 followed shortly thereafter to fix a regression.

New npm Products and a Glimpse Ahead — npm Pro is a new (paid – $7/mo) offering from npm Inc. (the owners of the npm package repository) that lets you publish an unlimited number of private packages via npm if you so wish. There’s also Teams (formerly ‘Orgs’) which goes a step further with team management.

npm 6.13.4 Released, Please Upgrade — There have been two key bugfix releases this week – this is the latest. Why upgrade? Because in npm 6.13.2 and earlier, a nefarious package publisher could put something into their package.json that would let them modify arbitrary files on your system. Luckily, no examples of this attack have yet been found by npm’s security team.

npm Inc.'s Community, Docs, and npm 7 Update — A lengthy blog post that includes a variety of updates from npm Inc. Key points:

npm 6.12.1 Released — A few minor bugfixes and Node 13 (released last week) is now an officially supported version (a warning message was shown before).

npm Turns 10 Years Old — It took a couple of years to really explode in use, but npm came out not too long after Node itself. npm Inc. celebrates with a brief 54 second video skimming through npm’s growth and releases.

Avoiding the Tragedy of the Commons: Acceptable Use of the npm Public Registry — Usage of the official npm repository is still growing along a ‘hockey stick’ curve and npm Inc. wants to ensure a high level of service is maintained. As such, their acceptable usage policy now clarifies that making over 5 million requests per month is considered ‘excessive’.