Search results

[Support] min-release-age for npm ci

Status: Open.

#9281 In npm/cli;

· pealtrufo opened on Apr 24, 2026

Bundled tar@7.5.9 affected by CVE-2026-29786 and CVE-2026-31802

Status: Open.

#9280 In npm/cli;

· Frostburn2332 opened on Apr 24, 2026

[BUG] npm audit signatures returns ETARGET on lockfile-pinned versions younger than min-release-age

Status: Open.

#9277 In npm/cli;

· Bafff opened on Apr 24, 2026

[BUG] Publishing denied for 2FA reasons despite "Bypass 2FA" tokens

Bugthing that needs fixingthing that needs fixing

Needs Triageneeds review for next stepsneeds review for next steps

Status: Open.

#9268 In npm/cli;

· notgapriel opened on Apr 22, 2026

[BUG] 11.12.1 peerOptional dependencies marked extraneous and removed

Bugthing that needs fixingthing that needs fixing

Needs Triageneeds review for next stepsneeds review for next steps

Status: Open.

#9249 In npm/cli;

· everett1992 opened on Apr 17, 2026

[Feature] Global and project specific config to pin package version for npx

Status: Open.

#9244 In npm/cli;

· hechang27-sprt opened on Apr 16, 2026

[Feature Request] Support trustPolicy to reject packages with provenance downgrade at install time

Status: Open.

#9242 In npm/cli;

· rgomezcasas opened on Apr 15, 2026

The tag declaration can be displayed when npm publish.

Status: Open.

#9236 In npm/cli;

· RSS1102 opened on Apr 15, 2026

[BUG] npm package suddenly bloated

Bugthing that needs fixingthing that needs fixing

Needs Triageneeds review for next stepsneeds review for next steps

Status: Open.

#9220 In npm/cli;

· maddie-j opened on Apr 13, 2026

[BUG] Cannot read properties of undefined (reading 'binPaths') when trying to use npx with workspaces and install-strategy=linked

Bugthing that needs fixingthing that needs fixing

Priority 2secondary priority issuesecondary priority issue

Status: Open.

#9210 In npm/cli;

· james-pre opened on Apr 8, 2026

[BUG] min-release-age not shown by npm config ls

Bugthing that needs fixingthing that needs fixing

Priority 2secondary priority issuesecondary priority issue

Status: Open.

#9199 In npm/cli;

· SuperITMan opened on Apr 7, 2026

[BUG] npm publish --dry-run should detect name similarity conflicts before actual publish

Bugthing that needs fixingthing that needs fixing

Needs Triageneeds review for next stepsneeds review for next steps

Status: Open.

#9188 In npm/cli;

· yetanotheraryan opened on Apr 3, 2026