npm Blog Archive
The npm blog has been discontinued. Updates from the npm team are now published on the GitHub Blog and the GitHub Changelog. Release v7.3.0 (December 18th, 2020 12:57pm) Release v7.2.0 (December 15th, 2020 11:56am) Release v7.1.2 (December 11th, 2020 1:37pm) Release v7.1.0 (December 4th, 2020 12:26pm) Release v7.0.15 (November 27th, 2020 9:06am) Release v7.0.13 (November 20th, 2020 12:20pm) Releas
npm Blog Archive: npm v7 Series - Why Keep `package-lock.json`?
The npm blog has been discontinued. Updates from the npm team are now published on the GitHub Blog and the GitHub Changelog. << Arborist Deep Dive >> Beta Release! One common question we’ve gotten a few times now, once we announce that npm v7 will include support for yarn.lock files, is “Why keep package-lock.json at all, then? Why not just use yarn.lock only?” The simple answer is: because yarn.l
npm Blog Archive: npm v7 Series - Introduction
The npm blog has been discontinued. Updates from the npm team are now published on the GitHub Blog and the GitHub Changelog. >> Arborist Deep Dive Quite a lot has happened in npm since our last update way back in 2019. We’re overdue for a status update on npm v7. Despite some massive distracting changes (some unfortunate, some very fortunate), development work has been proceeding steadily. Yesterd
npm Blog Archive: Next Phase Montage
The npm blog has been discontinued. Updates from the npm team are now published on the GitHub Blog and the GitHub Changelog. tl;dr – Good news! npm, Inc., is being purchased by GitHub. The public registry remains public, free, and as available as ever. npm as you know it continues, and in fact, there is good reason to believe that it’ll only get better. I’m still going to be working on npm (but wi
npm Blog Archive: Binary Planting with the npm CLI
The npm blog has been discontinued. Updates from the npm team are now published on the GitHub Blog and the GitHub Changelog. tl;dr - Update to npm v6.13.4 as soon as possible on all your systems to fix a vulnerability allowing arbitrary path access. The Vulnerabilities In versions of npm prior to 6.13.3 (and versions of yarn prior to 1.21.1), a properly constructed entry in the package.json bin fi
npm Blog Archive: Two-factor authentication protection for packages
The npm blog has been discontinued. Updates from the npm team are now published on the GitHub Blog and the GitHub Changelog. I’m happy to announce that you can now beta-test two-factor authentication protection for individual packages in the npm Registry. This setting requires that every publication of a protected package be authorized by a one-time password. This requirement is enforced even if m
npm Blog Archive: npm CLI Roadmap - Summer 2019
The npm blog has been discontinued. Updates from the npm team are now published on the GitHub Blog and the GitHub Changelog. Motion on the npm CLI project has been accelerating, and we’re now moving forward with a clear direction and vision. This document outlines what’s in store for the remainder of the npm v6 line, and what to expect in v7 and v8. Remaining npm v6 Releases npm v6 is officially i
npm Blog Archive: Plot to steal cryptocurrency foiled by the npm security team
The npm blog has been discontinued. Updates from the npm team are now published on the GitHub Blog and the GitHub Changelog. Yesterday, the npm, Inc. security team, in collaboration with Komodo, helped protect over $13 million USD in cryptocurrency assets as we found and responded to a malware threat targeting the users of a cryptocurrency wallet called Agama. This attack focused on getting a mali
npm Blog Archive: npm, Inc. has a new CEO, Bryan Bogensberger
The npm blog has been discontinued. Updates from the npm team are now published on the GitHub Blog and the GitHub Changelog. Coming up as a software developer in Open Source, I’ve long believed that the best path to success is to depend on the strengths of others. One reason why I wrote a package manager in the first place was that I knew the JavaScript community as a whole could write a much bett
npm Blog Archive: This year in JavaScript: 2018 in review and npm’s predictions for 2019
The npm blog has been discontinued. Updates from the npm team are now published on the GitHub Blog and the GitHub Changelog. This study is adapted from my presentation npm and the Future of JavaScript. No data is perfect; if you have questions about ours you can read about the methodology used to gather this data. npm has over 10 million users who download well over 30 billion packages every month
The npm Blog — Details about the event-stream incident
The npm blog has been discontinued. Updates from the npm team are now published on the GitHub Blog and the GitHub Changelog. This is an analysis of the event-stream incident of which many of you became aware earlier this week. npm acts immediately to address operational concerns and issues that affect the safety of our community, but we typically perform more thorough analysis before discussing in
npm Blog Archive: Three new features to help our users protect themselves
The npm blog has been discontinued. Updates from the npm team are now published on the GitHub Blog and the GitHub Changelog. As you’ve probably noticed, npm has been on a roll delivering security features. We have three new features on the website that we’d like to share: the report a vulnerability button, security advisories, and a feature that prevents the use of compromised passwords. Report a
npm Blog Archive: npm Joins ECMA International and TC39
The npm blog has been discontinued. Updates from the npm team are now published on the GitHub Blog and the GitHub Changelog. We’re excited to announce that npm has joined ECMA International and is participating in TC39, the working group of ECMA International that defines the standard for the JavaScript programming language. (The standard is, strictly speaking, called ECMAScript, although everyone
npm Blog Archive: Reported malicious module: getcookies
The npm blog has been discontinued. Updates from the npm team are now published on the GitHub Blog and the GitHub Changelog. Early May 2nd, the npm security team received and responded to reports of a package that masqueraded as a cookie parsing library but contained a malicious backdoor. The result of the investigation concluded with three packages and three versions of a fourth package being unp
npm Blog Archive: Beyond npm@6: The future of the npm cli
The npm blog has been discontinued. Updates from the npm team are now published on the GitHub Blog and the GitHub Changelog. This week npm@6 is going to be promoted to latest and so now is an excellent time to look forward. If you dig into it you’ll find that it doesn’t have much in the way of breaking changes. Later this year we’ll be releasing npm@7. First there are a few new features, these wil
The npm Blog — Introducing `npm ci` for faster, more reliable...
The npm blog has been discontinued. Updates from the npm team are now published on the GitHub Blog and the GitHub Changelog. Starting today, all npm users can take advantage of a new install command called npm ci. The command offers massive improvements to both the performance and reliability of builds for continuous integration / continuous deployment processes, providing a consistent and fast ex
npm Blog Archive: npm operational incident, 6 Jan 2018
The npm blog has been discontinued. Updates from the npm team are now published on the GitHub Blog and the GitHub Changelog. The npm registry had an operations incident Saturday that caused 97 packages to be temporarily unavailable for download for approximately 30 minutes, and an additional 9 packages to be unavailable for approximately three hours. Early this coming week, we will share a full an
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
npm Blog Archive: So long, and thanks for all the packages!
npm Blog Archive: Next Phase Montage
npm Blog Archive: Release: 6.9.1