corepack
corepack copied to clipboard
nodejs
Zero-runtime-dependency package acting as bridge between Node projects and their package managers
It should be possible to define package manager constraints separately for certain operations, for example `install`/`uninstall` operations could get validation but `run` would allow any package manager. This would allow...
when using a custom registry with a path after the base URL (like `https://registry.example.org/with-path/npm`) and using COREPACK_NPM_TOKEN corepack would not set the Bearer token correctly for the file download (it...
This is an automated update of package manager versions
![github-actions[bot] avatar](https://avatars.githubusercontent.com/in/15368?v=4 "github-actions[bot] avatar"){kind=avatar}
Currently, there's no standardized way to install dependencies for projects using different package managers without prior knowledge of the specific manager used. This can complicate CI/CD pipelines, development scripts, and...
After https://github.com/nodejs/corepack/pull/432, looks the hash algorithm for integrity check have switched to SHA-512. I want to reflect it to README.
corepack supports downloading the package managers from a source that is not npm. I think this is a significant security risk for our users and we should only download them...
If I have a package.json with some empty lines (in this case intentionally), that doesn't specify `packageManager`, then running a shim (for example `yarn install`) adds the `packageManager` attribute but...
The documentation states that the known good releases of system wide binaries can be updated using `corepack install -g`: > Known Good Releases > When running Corepack within projects that...
Not all proxies rewrite the tarball URL, and expect the client to do so. Fixes: https://github.com/nodejs/corepack/issues/498
I have my packageManger field set to "[email protected]" When using `COREPACK_NPM_REGISTRY` environment variable, corepack fetch succesfully metadata for the given package manager using the provided registry url. However it seems...
