nlf

i could absolutely see adding this support as a new feature. my biggest question would be what do we do if a config file is found at both `~/.npmrc` and...

> I just don't think there's any inherent value in following XDG i think "value" is very subjective here. there are hazards to be sure, but as mentioned here in...

> I think the location where we store config files, specifically (the rest i don't care about) is something that can't be changed. For example, a package could be accidentally...

> When was xdg support added to pip, git, and firefox? looks like pip and git started supporting it way back in 2014, so that was a misspeak on my...

worth noting that the arch linux wiki has a big list of apps that support XDG, including data about when the support was added: https://wiki.archlinux.org/title/XDG_Base_Directory#Supported

> Nobody's prevented from using XDG now explicitly. I think this is where our focus should lie here. We have means of overriding these file locations available, we can solve...

what if `npm init -y` omitted the license field entirely, and `npm init` prompted the user to actually provide a license. if they just press enter with no value, we...

i've made some updates to this document including several unanswered questions as well as detailing a known risk and adding in some other alternatives

we have stopped altering file ownership at runtime on the user's behalf in npm@9 entirely. i think we have some follow up work to do here to try to help...

Just a random thought.. Might be possible to just check if the singularized form of the name is equal to the literal name rather than setting a flag manually. Not...