Gar

After a little more digging, this time at an actual computer, it looks like make-fetch-happen does reuse agents, storing them in the lru cache https://github.com/npm/make-fetch-happen/blob/main/lib/agent.js#L57-L59 The agents are keyed by...

> * Can `pacote` caching strategy be mended to honor last-modified headers (or does it already honor them)? The caching in the npm toolset was [overhauled last year](https://github.com/npm/make-fetch-happen/pull/49) and does...

Here's a gist showing how to do far fewer network requests to find the newest version of a given package is available from the npm registry. I limited the pagination...

I updated the gist to give examples of "highest version possible without changing the package.json" which is effectively what "npm update --save" will do (dunno if that shipped yet), and...

`npm ci` is also affected, it looks like the yarn.lock is modified even then. cf https://github.com/npm/cli/issues/5317

According to https://github.com/npm/cli/pull/5659 this doesn't address all of the issues, only some.

Ah yep, `libnpmexec` is pulling `scriptShell` out of `flatOptions`, but not passing it back through the chain to `run-script`

Even though node will look in `NODE_PATH` to resolve `require` statements, `npm` itself doesn't take that into consideration when building up the local package tree. All it knows is the...

The reason you get this message is because the local package *does* actually have to install. A package as-is doesn't have its `bin` entries linked properly, so npx has to...

```sh ~/D/n/gar-create-test (main|✔) $ npm -v 8.18.0 ~/D/n/gar-create-test (main|✔) $ npx . Gar's test create script version 2.0.3 ```