Search results

[BUG] npm breaks when using min-release-age and git: or github: urls for dependencies

Bugthing that needs fixingthing that needs fixing

Needs Triageneeds review for next stepsneeds review for next steps

Status: Open.

#9291 In npm/cli;

· puzzledmonkey opened on Apr 30, 2026

[BUG] Same package at multiple levels in bundleDependencies triggers NPM failures

Bugthing that needs fixingthing that needs fixing

Needs Triageneeds review for next stepsneeds review for next steps

Status: Open.

#9289 In npm/cli;

· rix0rrr opened on Apr 29, 2026

[BUG] npm audit signatures returns ETARGET on lockfile-pinned versions younger than min-release-age

Status: Open.

#9277 In npm/cli;

· Bafff opened on Apr 24, 2026

[BUG] Publishing denied for 2FA reasons despite "Bypass 2FA" tokens

Bugthing that needs fixingthing that needs fixing

Needs Triageneeds review for next stepsneeds review for next steps

Status: Open.

#9268 In npm/cli;

· notgapriel opened on Apr 22, 2026

[BUG] 11.12.1 peerOptional dependencies marked extraneous and removed

Bugthing that needs fixingthing that needs fixing

Needs Triageneeds review for next stepsneeds review for next steps

Status: Open.

#9249 In npm/cli;

· everett1992 opened on Apr 17, 2026

[Feature] Global and project specific config to pin package version for npx

Status: Open.

#9244 In npm/cli;

· hechang27-sprt opened on Apr 16, 2026

[Feature Request] Support trustPolicy to reject packages with provenance downgrade at install time

Status: Open.

#9242 In npm/cli;

· rgomezcasas opened on Apr 15, 2026

[BUG] npm publish --dry-run should detect name similarity conflicts before actual publish

Bugthing that needs fixingthing that needs fixing

Needs Triageneeds review for next stepsneeds review for next steps

Status: Open.

#9188 In npm/cli;

· yetanotheraryan opened on Apr 3, 2026

[BUG] npm update --dry-run is bloken

Bugthing that needs fixingthing that needs fixing

Priority 2secondary priority issuesecondary priority issue

Status: Open.

#9187 In npm/cli;

· zdm opened on Apr 3, 2026

[BUG] Broken editor when using "npm config edit --global" on Debian

Bugthing that needs fixingthing that needs fixing

Needs Triageneeds review for next stepsneeds review for next steps

Status: Open.

#9184 In npm/cli;

· eabase opened on Apr 2, 2026

feat: Add CLI/API support for "disallow tokens" publishing access setting

Status: Open.

#9180 In npm/cli;

· amilz opened on Apr 1, 2026

Smart security enhancment: Limit Trusted Publisher to not tag "latest"

Status: Open.

#9169 In npm/cli;

· dfahlander opened on Mar 31, 2026