npm @npmjs

The package manager for JavaScript. Problems? Visit https://t.co/WNuo1MMbMP or https://t.co/i3MoAdr5p5. npmjs.com Joined June 2011

Tweets

5K
Followers

147K
Following

144
Likes

682

npm @npmjs

6 months ago

track direct and transitive dependencies for npm packages with GitHub’s dependency graph ⬇️ github.blog/changelog/2025…

1 9 42 29K 10

starting today, developers building npm projects on @github Actions can request a provenance statement to be published alongside their package, giving consumers a verifiable way to link a package back to its source repository and build instructions. github.blog/2023-04-19-int…

14 74 254 119K 20

npm @npmjs

3 years ago

Now you can create tokens with fine-grained permissions for automating your publishing and org management workflows. And a new code explorer allows you to view content of a package directly in the npm portal. github.blog/2022-12-06-new…

3 11 40 0 3

Elijah Manor @elijahmanor

3 years ago

⚡️ #7: Use npm query and jq to dig into your dependencies youtube.com/watch?v=h_Zpix… You can use the new "npm query" command and jq to answer interesting questions about your package's dependencies #terminalrocks

8 17 43 0 7

Download Image

npm @npmjs

3 years ago

Today we opened an RFC with a proposal of how npm can collaborate with @projectsigstore to link packages to their source and build, a significant improvement to the supply chain security of the JavaScript ecosystem. github.blog/2022-08-08-new…

6 40 145 0 10

npm @npmjs

3 years ago

🚀 we just shipped npm v8.16.0 with the new `npm query` command 📦 this new feature allows developers to quickly ask & answer questions about their project's dependencies. you can learn more here: github.blog/changelog/2022… ⬇️ to get it now, run: $ npm install -g npm

3 30 80 0 4

npm @npmjs

3 years ago

We've launched a number of security enhancements to npm including: * Improved login and publish experience /w CLI * Connecting GitHub + Twitter accounts * All packages have been resigned and a new command `npm audit signatures` Read more at: github.blog/2022-07-26-int…

3 58 201 0 16

npm @npmjs

3 years ago

do you publish from a npm workspace & use a root-level ignore file? if so, you should update to npm v8.11.0 or the latest versions of Node.js 16/17/18 to avoid a recently discovered vulnerability that wouldn't respect these files. read the advisory here: github.co/3zebIPH

4 24 44 0 1

GitHub Security @GitHubSecurity

3 years ago

GitHub has been actively investigating the attack campaign around stolen OAuth tokens, of which @npmjs was a victim organization. Today we’re sharing our final impact analysis for npm as well as additional findings. github.blog/2022-05-26-npm…

GitHub Security @GitHubSecurity

3 years ago

15 662 978 0 132

2 98 195 0 20

npm @npmjs

3 years ago

🔒 an enhanced npm 2FA experience is now available in public beta. it includes: * support for physical security keys and biometric devices * support for multiple second factors * a new 2FA configuration menu and more! github.blog/2022-05-10-enh…

1 37 64 0 2

npm @npmjs

3 years ago

🚀 Our CLI team just shipped their weekly release! 📦 [email protected] makes `npm owner` workspace-aware & also comes with some docs, deps & core updates/fixes. ⬇️ Get it now: $ npm install -g npm See more in the changelog: github.com/npm/cli/releas…

0 8 25 0 1

🦋 @ruyadorno.com @ruyadorno

3 years ago

A new @npmjs cli release is out! 🚀 📦 [email protected] adds a new `--install-links` option to opt into packing+install dependencies defined using the `file:` protocol instead of symlinking. ⬇️ Get it now: $ npm install -g npm See more in the changelog: github.com/npm/cli/releas…

1 8 22 0 0

npm @npmjs

3 years ago

we've got a jam packed Open RFC call today w/ some exciting topics like: v9 roadmap, `npm query` + dependency selector syntax, command-specific configuration & more... come join us live at 2pm EST: github.com/npm/rfcs/issue… #npm #nodejs #javascript

2 9 17 0 0

🦋 @ruyadorno.com @ruyadorno

4 years ago

It's npm cli release day again! 🎉 🚀 [email protected] - fixes `npm ci` lock file validation - fixes parsing aliases in `npm outdated` - And more! ⬇️ Get it now: npm install -g npm See more in the changelog: github.com/npm/cli/releas…

23 7 33 0 0

npm @npmjs

4 years ago

exciting open rfc meeting planned today at 11am pt / 2pm et; we've got a full agenda including new rfcs for package distributions & ux changes to clean up deprecation warnings: github.com/npm/rfcs/issue… 🎙 come join the discussion or watch live on youtube youtube.com/channel/UCK71W…

12 4 11 0 0

npm @npmjs

4 years ago

today we enrolled all maintainers of the top-100 npm packages in mandatory 2FA. read more about it on our blog: github.blog/2022-02-01-top…

8 34 201 0 7

npm @npmjs

4 years ago

we hope to see you at our weekly open rfc meeting today! check out what's on the agenda and how to join ⬇️ github.com/npm/rfcs/issue…

3 1 6 0 0

npm @npmjs

4 years ago

we just shipped a number of security-focused improvements to npm including: - naming access tokens - enforcing 2FA in your npm orgs - improved auditing for 2FA adoption in orgs - selecting teams when adding new org members read more in our Changelog ⬇️ github.blog/changelog/2022…