Repository navigation

All pull requests

Labels (88)Milestones (0)New pull request

Open

(196)

Closed

(3,718)

fix(arborist): keep an override written in two scopes on a shared node
#10138ump45nose opened Oct 16, 2026
fix(publish): report publishConfig.tag in publish and stage notices
#10136ljharb opened Oct 15, 2026Contributor
fix(libnpmexec): install npx cache despite dryRun or packageLockOnly
#10135ljharb opened Oct 15, 2026Contributor
fix(arborist): reuse a link target spelled with a different drive-letter case
#10133vsolano9 opened Oct 15, 2026
fix(arborist): skip normalization for canonical ASCII map keys
#10132jeffwidman opened Oct 15, 2026Member
fix(arborist): skip named-edge refresh work for empty leaves
#10131jeffwidman opened Oct 15, 2026Member
fix(arborist): skip legacy dependency generation for v3 lockfiles
#10130jeffwidman opened Oct 15, 2026Member
fix(arborist): block symlink escape in patch applier
#10129rootvector2 opened Oct 15, 2026Contributor
2
fix(arborist): skip bundle checks without an applicable override
#10128jeffwidman opened Oct 15, 2026Member
fix(arborist): use a set for bundled-dependency traversal
#10127jeffwidman opened Oct 15, 2026Member
1
fix(arborist): bound concurrent package.json reads in loadActual
#10126SunnyScenery opened Oct 15, 2026
fix(view): format publisher metadata containing actor information
#10123sergioperezcheco opened Oct 14, 2026
fix(stage): validate staged manifest before writing the tarball
#10121rootvector2 opened Oct 14, 2026Contributor
fix(unpublish): refuse to unpublish a version when the registry returns no versions
#10117meganemura opened Oct 12, 2026
5
fix: accept omitted unresolved optional packages in npm ci
#10115mvanhorn opened Oct 12, 2026Contributor
docs(arborist): describe yarn and pnpm lockfile support
#10110ump45nose opened Oct 10, 2026
docs: note that npm install -g does not create a local node_modules
#10109ump45nose opened Oct 10, 2026
docs: propose Markdown conventions in CONTRIBUTING
#10108ump45nose opened Oct 10, 2026
docs(npmrc): describe how credentials are matched to the registry URL
#10107ump45nose opened Oct 10, 2026
docs: define "packument" in the registry documentation
#10106ump45nose opened Oct 10, 2026
Add Terraform CI workflow for GitHub Actions
#10105tt900 opened Oct 10, 2026
fix(update-notifier): only mark sentinel checked when notice is shown
#10104nkolev92 opened Oct 9, 2026
fix(perf): do not list network interfaces when loading config definitions
#10097azchohfi opened Oct 8, 2026
fix(perf): lazy load arborist and pacote in libnpmexec
#10096azchohfi opened Oct 8, 2026
libnpmexec: escape executable name on Windows (cmd injection via npx)
#10095kalt2212 opened Oct 8, 2026

Navigation Menu

Repository navigation

All pull requests

fix(arborist): keep an override written in two scopes on a shared node

fix(publish): report publishConfig.tag in publish and stage notices

fix(libnpmexec): install npx cache despite dryRun or packageLockOnly

fix(arborist): reuse a link target spelled with a different drive-letter case

fix(arborist): skip normalization for canonical ASCII map keys

fix(arborist): skip named-edge refresh work for empty leaves

fix(arborist): skip legacy dependency generation for v3 lockfiles

fix(arborist): block symlink escape in patch applier

fix(arborist): skip bundle checks without an applicable override

fix(arborist): use a set for bundled-dependency traversal

fix(arborist): bound concurrent package.json reads in loadActual

fix(view): format publisher metadata containing actor information

fix(stage): validate staged manifest before writing the tarball

fix(unpublish): refuse to unpublish a version when the registry returns no versions

fix: accept omitted unresolved optional packages in npm ci

docs(arborist): describe yarn and pnpm lockfile support

docs: note that `npm install -g` does not create a local node_modules

docs: propose Markdown conventions in CONTRIBUTING

docs(npmrc): describe how credentials are matched to the registry URL

docs: define "packument" in the registry documentation

Add Terraform CI workflow for GitHub Actions

fix(update-notifier): only mark sentinel checked when notice is shown

fix(perf): do not list network interfaces when loading config definitions

fix(perf): lazy load arborist and pacote in libnpmexec

libnpmexec: escape executable name on Windows (cmd injection via npx)

Pull requests