rfcs
rfcs copied to clipboard
npm
Public change requests/proposals & ideation
## Motivation ("The Why") When packages do not specify a minimum supported Node version, some people may assume that the package supports *any* version of Node--or at least the ones...
## Motivation ("The Why") I have a lot of mono-repos, which want to be published every once in a while. When using the workspace option to publish multiple packages at...
First reported in https://github.com/npm/npm/issues/13248 and https://github.com/npm/cli/issues/7553, this RFC proposes changing the behavior of `npm publish` by disallowing publishing pre-release versions under the `latest` tag (implicitly). This RFC also tackles the...
Bumps [tap](https://github.com/tapjs/tapjs) from 16.3.10 to 21.0.1. Release notes Sourced from tap's releases. [email protected] No release notes provided. [email protected] No release notes provided. [email protected] No release notes provided. [email protected] No release...
![dependabot[bot] avatar](https://avatars.githubusercontent.com/in/29110?v=4 "dependabot[bot] avatar"){kind=avatar}
*Moved from https://github.com/nodejs/node/issues/54016* ### What is the problem this feature will solve? Many popular projects do not use SemVer. Take Microsoft/TypeScript (https://github.com/microsoft/TypeScript/issues/14116) or jashkenas's packages (https://github.com/jashkenas/underscore/issues/1684). These package maintainers do...
## Motivation ("The Why") ### Example ### How #### Current Behaviour #### Desired Behaviour ### References * n/a
Sorry, maybe I missed something, I know there's the RFC meetings, but can't find the calendar for them - when is this going to be discussed? Is it better to...
Bumps [@npmcli/template-oss](https://github.com/npm/template-oss) from 4.23.3 to 4.23.4. Release notes Sourced from @npmcli/template-oss's releases. v4.23.4 4.23.4 (2024-10-02) Dependencies d267eb3 #487 bump [email protected] 1d3b53e #487 bump [email protected] 6840cf2 #487 bump [email protected] 552c637 #487...
## Motivation ("The Why") It's very bad for different users prefer different registries globally, I accidentally commit unexpected changes several times. ### Example FYI, `yarn` 2+ and `pnpm` don't store...
## Motivation ("The Why") Publishing to npm today allows anyone to set the `homepage` and `repository` fields in their package metadata without any verification. This gap makes it trivial for...
