Joost van der Waal

I'm very well known with what is possible with npm but that is not the question. The question is about making NPM_TOKEN optional (with maybe a setting like : ignoreNpmToken:...

I'm always in favor of autodetection with the possibility of escape hatches :) For example, you can't just check the "_auth" property of npmrc. This is only a basic auth...

I was looking at npm ping. This promises to do exactly what you are proposing. Unfortunately with our artifactory config on my local machine I already had to kill the...

I'm running against this check: https://github.com/semantic-release/npm/blob/88e5862eeea28162d8d231bbe7ac4d40a0fc9e12/lib/set-npmrc-auth.js#L45 Only enforcing this with default registry could also be an option. It mainly about what your philosophy is with the intended behavior