cli

cli copied to clipboard

[BUG] "Unknown user/project config" warning about "email"

3

### Is there an existing issue for this? - [x] I have searched the existing issues ### This issue exists in the latest npm version - [x] I am using...

prantlf

### Is there an existing issue for this? - [x] I have searched the existing issues ### This issue exists in the latest npm version - [x] I am using...

bluwy

How to have `ignore-scripts=true` but still have `prepare` script run in own package on publish?

1

I want to have `ignore-scripts=true` in my global .npmrc for security reasons, but I still need to publish packages that need to build TypeScript code on publish. This worked until...

sindresorhus

[BUG] git+https protocol not respected when generating package-lock.json

5

### Is there an existing issue for this? - [X] I have searched the existing issues ### This issue exists in the latest npm version - [X] I am using...

denenr

Allow publishing initial version with OIDC

3

Support for trusted publishing using OIDC was added in #8336 and is now [generally available](https://github.blog/changelog/2025-07-31-npm-trusted-publishing-with-oidc-is-generally-available/). One limitation is that it's not possible to publish the initial version of a package...

johnbillion

validating auth context when using OIDC to publish

7

hi, folks 👋🏼 i maintain [semantic-release](https://github.com/semantic-release/semantic-release/) and have been [working toward](https://github.com/semantic-release/npm/issues/958) adding official support for using the newly available [trusted publishing](https://github.blog/changelog/2025-07-31-npm-trusted-publishing-with-oidc-is-generally-available/). making the actual trusted publish work was straight forward...

travi

2025-10-16T04_02_49_901Z-debug.log

1

npm ERR! cb() never called! npm ERR! This is an error with npm itself. Please report this error at: npm ERR! verbose cli [ 0 verbose cli '/usr/bin/node', 0 verbose...

Ihateipods4ever

feat: add JSR protocol support for package specifiers

1

**Motivation** Given that JSR is an MIT-licensed open-source solution and is already supported by other package managers such as Volt and pnpm, I believe npm should also adopt this feature...

eser

[BUG] Directly requested packages incorrectly marked as peer and not installed with --omit-peer

1

### Is there an existing issue for this? - [x] I have searched the existing issues ### This issue exists in the latest npm version - [x] I am using...

blexrob

fix: improve pack performance by not reading into memory

2

The current implementation is very slow due to having to load all into memory before writing the file. Pacote itself has a command that does that right away as a...

BridgeAR