All pull requests

Pull requests

• Rename npm.md to npm.md

  #10119·zskbot opened Oct 12, 2026·

  ·

• fix(arborist): report ETARGET instead of ERESOLVE for unresolvable peer targets

  #10118·github-actions[bot] opened Oct 12, 2026Bot·

  ·

• fix(unpublish): check the last version against the full packument

  #10117·meganemura opened Oct 12, 2026·

  ·
  1

• fix: accept omitted unresolved optional packages in npm ci

  #10115·mvanhorn opened Oct 12, 2026Contributor·

  ·
  1

• docs(arborist): describe yarn and pnpm lockfile support

  #10110·ump45nose opened Oct 10, 2026·

  ·
  1

• docs: note that npm install -g does not create a local node_modules

  #10109·ump45nose opened Oct 10, 2026·

  ·

• docs: propose Markdown conventions in CONTRIBUTING

  #10108·ump45nose opened Oct 10, 2026·

  ·

• docs(npmrc): describe how credentials are matched to the registry URL

  #10107·ump45nose opened Oct 10, 2026·

  ·
  1

• docs: define "packument" in the registry documentation

  #10106·ump45nose opened Oct 10, 2026·

  ·

• Add Terraform CI workflow for GitHub Actions

  #10105·tt900 opened Oct 10, 2026·

  ·

• fix(update-notifier): only mark sentinel checked when notice is shown

  #10104·nkolev92 opened Oct 9, 2026·

  ·

• fix(perf): do not list network interfaces when loading config definitions

  #10097·azchohfi opened Oct 8, 2026·

  ·

• fix(perf): lazy load arborist and pacote in libnpmexec

  #10096·azchohfi opened Oct 8, 2026·

  ·

• libnpmexec: escape executable name on Windows (cmd injection via npx)

  #10095·kalt2212 opened Oct 8, 2026·

  ·

• fix(arborist): scope named updates to selected workspaces

  #10091·myevolve opened Oct 7, 2026·

  ·

• fix(arborist): preserve explicit npm alias target identities

  #10090·myevolve opened Oct 7, 2026·

  ·
  1

• deps: resolve production audit vulnerabilities

  #10089·reggi opened Oct 6, 2026Contributor·

  ·
  1

• deps: resolve production audit vulnerabilities

  #10088·reggi opened Oct 6, 2026Contributor·

  ·
  1

• fix(arborist): keep an optional peer that shadows a version not satisfying it

  #10087·HardMax71 opened Oct 6, 2026·

  ·
  1

• fix: start node once per call in the Windows npm/npx shims

  #10084·azchohfi opened Oct 5, 2026·

  ·

• fix: install dependencies of nested linked workspaces

  #10083·drewmt opened Oct 5, 2026·

  ·
  1

  4

• mvvvip LEE Update npm-shrinkwrap.json documentation metadata

  #10081·keonglee1341 opened Oct 5, 2026·

  ·

• fix(arborist): guard explicit request edges that have no matching edge

  #10075·rubenmarcus opened Oct 4, 2026·

  ·
  1

  2

• fix: tolerate malformed bundled entry names when listing tarball contents

  #10074·ManoharPaturi opened Oct 4, 2026·

  ·
  1

• fix(bugs): allow mailto urls through the opener validation

  #10073·ManoharPaturi opened Oct 4, 2026·

  ·
  1