hello.js

var please = require('share');
console.log('thank you');

Thursday, 13 September, 2018 UTC

Next Generation Package Management

Next Generation Package Management

What if installs were so fast they could happen in the background, just by using Node? What every file in your dependencies could be guaranteed to be bit-by-bit identical to what’s on the registry? What if working on a new project was as simple as clone ... more


Wednesday, 29 August, 2018 UTC

Release: npm@6.4.1

Release: [email protected]

A new version of the npm CLI has been released! next: 6.4.1 latest: 6.4.1 Check out the changelog on npm.community ... more


Tuesday, 28 August, 2018 UTC

npm Convos: Capital One

npm Convos: Capital One

Q. Hi! Can you state your name, what you do, and/or what your company does? A. My name is Joe Hanley, and I am a full-stack software engineer at Capital One. We’re a bank, a credit card company, and a financial services provider, but we like to think ... more


Thursday, 23 August, 2018 UTC

Release: npm@6.4.1-next.0

Release: [email protected]

A new npm cli version has been released! latest: 6.4.0 next: 6.4.1-next.0 Check out the changelog on npm.community ... more


Thursday, 23 August, 2018 UTC

Three new features to help our users protect themselves

Three new features to help our users protect themselves

As you’ve probably noticed, npm has been on a roll delivering security features. We have three new features on the website that we’d like to share: the report a vulnerability button, security advisories, and a feature that prevents the use of compromised ... more


Wednesday, 15 August, 2018 UTC

Release: npm@6.4.0

Release: [email protected]

A new version of npm has been released! Read more about it on npm.community! ... more


Thursday, 9 August, 2018 UTC

v6.4.0-next.0

v6.4.0-next.0

NEW FEATURES 6e9f04b0b npm/cli#8 Search for authentication token defined by environment variables by preventing the translation layer from env variable to npm option from breaking :_authToken . (@mkhl) 84bfd23e7 npm/cli#35 Stop filtering out non-IPv4 ... more


Thursday, 2 August, 2018 UTC

v6.3.0

v6.3.0

This is basically the same as the prerelease, but two dependencies have been bumped due to bugs that had been around for a while. 0a22be42e [email protected] (@zkat) 0096f6997 [email protected] (@zkat) ... more


Tuesday, 31 July, 2018 UTC

Community questions following the eslint security incident

Community questions following the eslint security incident

Following the eslint incident on July 12, 2018, the community reached out to us with a few follow-up questions. This post will answer those questions as well as provide some additional technical insight into the eslint-scope malware that we haven’t seen ... more


Wednesday, 25 July, 2018 UTC

v6.3.0-next.0

v6.3.0-next.0

NEW FEATURES ad0dd226f npm/cli#26 npm version now supports a --preid option to specify the preid for prereleases. For example, npm version premajor --preid rc will tag a version like 2.0.0-rc.0 . (@dwilches) MESSAGING IMPROVEMENTS c1dad1e99 npm/cli#6 ... more


Saturday, 14 July, 2018 UTC

v6.2.0

v6.2.0

In case you missed it, we moved!. We look forward to seeing future PRs landing in npm/cli in the future, and we’ll be chatting with you all in npm.community. Go check it out! This final release of [email protected] includes a couple of features that weren’t ... more


Friday, 13 July, 2018 UTC

Two-factor authentication protection for packages

Two-factor authentication protection for packages

I’m happy to announce that you can now beta-test two-factor authentication protection for individual packages in the npm Registry. This setting requires that every publication of a protected package be authorized by a one-time password. This requirement ... more


Thursday, 12 July, 2018 UTC

Incident report: npm, Inc. operations incident of July 12, 2018

Incident report: npm, Inc. operations incident of July 12, 2018

Early in the morning of July 12, an individual gained access to an npm publisher’s account and used this access to publish an unauthorized update of a popular package. The update included malicious code that would have attempted to access the accounts ... more


Tuesday, 10 July, 2018 UTC

npm Joins ECMA International and TC39

npm Joins ECMA International and TC39

We’re excited to announce that npm has joined ECMA International and is participating in TC39, the working group of ECMA International that defines the standard for the JavaScript programming language. (The standard is, strictly speaking, called ECMAScript, ... more


Thursday, 5 July, 2018 UTC

Announcing npm.community

Announcing npm.community

I am pleased to announce that npm is transitioning its public issue trackers from GitHub to a Discourse site at npm.community. This will allow us to give the community a single place to report bugs that impact npm, regardless if they’re on the website, ... more


Thursday, 5 July, 2018 UTC

v6.2.0-next.1

v6.2.0-next.1

This is a quick patch to the release to fix an issue that was preventing users from installing [email protected] . ecdcbd745 #21129 Remove postinstall script that depended on source files, thus preventing [email protected] from being installable from the registry. (@zkat) ... more


Wednesday, 4 July, 2018 UTC

The Node Security Platform service is shutting down 9/30

The Node Security Platform service is shutting down 9/30

Earlier this year, we announced npm, Inc.’s acquisition of ^Lift Security and the Node Security Platform and promised to provide updates as our teams combined to protect the world’s largest JavaScript developer community. Today, we have some news about ... more


Saturday, 30 June, 2018 UTC

v6.2.0-next.0

v6.2.0-next.0

NEW FEATURES ce0793358 #20750 You can now disable the update notifier entirely by using --no-update-notifier or setting it in your config with npm config set update-notifier false . (@travi) d2ad776f6 #20879 When npm run-script <script> fails due ... more


Wednesday, 27 June, 2018 UTC

JavaScript Usage by Industry

JavaScript Usage by Industry

We’re continuing our analysis of the results of last winter’s JavaScript Ecosystem Survey, a survey of over 16,000 developers conducted by npm in collaboration with the Node.JS Foundation and the JS Foundation. Our second topic is How JavaScript is used ... more


Tuesday, 19 June, 2018 UTC

Customer Convos: Standard JS

Customer Convos: Standard JS

This piece is a part of our Customer Convos series. We’re sharing stories of how people use npm at work. Want to share your thoughts? Drop us a line. Q: Hi! Can you state your name, what you do, and/or what your company does? A: Hey there! My name is ... more


Friday, 1 June, 2018 UTC

npm Pride 2018 Shirts

npm Pride 2018 Shirts

npm loves everyone! Just like last year, npm team’s Pride shirts available to all, with help from our friends at &yet and Teespring. Select your favorite design from the pictures below and click through for types and sizes — or collect them all! ... more


Wednesday, 30 May, 2018 UTC

How npm is affected by the recently disclosed git vulnerability

How npm is affected by the recently disclosed git vulnerability

npm cli users should make sure that they have git version 2.17.1 or later installed to protect against a recent code execution vulnerability involving git submodules. On May 29th, a new version of git (2.17.1) was published which addressed a flaw in ... more


Wednesday, 23 May, 2018 UTC

Customer Convos: BinaryOps Software

Customer Convos: BinaryOps Software

This piece is a part of our Customer Convos series. We’re sharing stories of how people use npm at work. Want to share your thoughts? Drop us a line. Q: Hi! Can you state your name, what you do, and/or what your company does? A: I’m Mark Voorberg, one ... more


Wednesday, 23 May, 2018 UTC

Privacy Policy Update for Privacy Shield

Privacy Policy Update for Privacy Shield

We’ve added language to our privacy policy about our participation in the EU-US and Swiss-US Privacy Shield programs. As always, you can read the diff on GitHub. ... more


Friday, 18 May, 2018 UTC

v6.1.0-next.0

v6.1.0-next.0

Look at that! A feature bump! [email protected] was super-exciting not just because it used a bigger number than ever before, but also because it included a super shiny new command: npm audit . Well, we’ve kept working on it since then and have some really nice ... more


Wednesday, 16 May, 2018 UTC

CouchDB browse views unavailable

CouchDB browse views unavailable

If you access /-/_view endpoints in the npm Registry, you have probably noticed that their availability has been low recently. We are temporarily suspending these endpoints and responding to them with 404s instead of the 504s you’ve been seeing. Our ... more


Wednesday, 9 May, 2018 UTC

`npm audit`: identify and fix insecure dependencies

`npm audit`: identify and fix insecure dependencies

Last month, we announced [email protected], which includes a powerful new tool to protect the safety of your code, npm audit . Together with new automatic alerts when a user installs code with a known security risk, audit is a dramatic step to ensure the quality ... more


Friday, 4 May, 2018 UTC

v6.0.1-next.0

v6.0.1-next.0

CTRL-C OUT DURING PACKAGE EXTRACTION AS MUCH AS YOU WANT! b267bbbb9 npm/lockfile#29 [email protected] : Switches to signal-exit to detect abnormal exits and remove locks. (@Redsandro) SHRONKWRAPS AND LACKFILES If a published modules had legacy npm-shrinkwrap.json ... more


Friday, 4 May, 2018 UTC

New privacy policy

New privacy policy

We’ve rewritten our privacy policy from scratch to make it easier to read, cover new features, and meet the requirements of the EU’s General Data Protection Regulation. The new policy also announces a new contact point, [email protected], for privacy-related ... more


Wednesday, 2 May, 2018 UTC

Reported malicious module: getcookies

Reported malicious module: getcookies

Early May 2nd, the npm security team received and responded to reports of a package that masqueraded as a cookie parsing library but contained a malicious backdoor. The result of the investigation concluded with three packages and three versions of a ... more