cli
https://github.com/npm/cli
JavaScript
the package manager for JavaScript
Triage Issues!
When you volunteer to triage issues, you'll receive an email each day with a link to an open issue that needs help in this project. You'll also receive instructions on how to triage issues.
Triage Docs!
Receive a documented method or class from your favorite GitHub repos in your inbox every day. If you're really pro, receive undocumented methods or classes and supercharge your commit history.
JavaScript not yet supported14 Subscribers
Add a CodeTriage badge to cli
Help out
- Issues
- npm exec (npx) links bins to the wrong directory when run from a global install's lifecycle script, causing "command not found" and install rollback
- [BUG] install hangs indefinitely instead of failing with ETARGET when --min-release-age rejects the requested version
- docs: fix grammar and missing brackets in document
- fix(arborist): contain lockfile patch path in reify applyPatch
- fix(arborist): prefer direct dependency bins
- [BUG] npx --yes <pkg> fails with 'sh: <bin>: command not found' — npx cache bin dir is not added to the spawned shell's PATH
- [BUG] `npm ls --json --long` outputs nothing and exits 1 when a deprecation message contains a URL (redaction corrupts compact JSON)
- fix: redact json output value by value so a url cannot corrupt it
- Bundled ip-address dependency vulnerable to SSRF (CVE-2026-69192 / GHSA-mwp4-54f8-5fhr)
- [BUG] Direct dependency's bin can be overwritten by a transitive dependency based on lexical package name
- Docs
- JavaScript not yet supported