OSS TanbouOn this page
Overview
npm CLI is a package manager for installing JavaScript packages, locking dependencies, running project scripts, and publishing packages to a registry. It ships with Node.js and can also use compatible third-party registries.
Features and best fit
Based on official documentation; not hands-on tested · Content checked:
Key features
Manage dependencies and reproducible installation state
It installs dependencies declared in package.json and records the resolved graph in package-lock.json, helping teams and CI reproduce the same dependency tree.
Give project tasks a common command interface
Scripts in package.json provide a shared entry point for project-specific tests and builds. The CLI also searches for packages, inspects package information, and publishes releases.
Sources: [2]
Best fit
Before adoption
Review script execution and service boundaries
Dependency installation can execute package lifecycle scripts. When evaluating untrusted dependencies, limit execution first, for example with --ignore-scripts. The CLI application uses Artistic License 2.0, while dependencies, the public registry, and the website have their own terms. Version 12.2.0 requires Node.js ^22.22.2, ^24.15.0, or >=26.0.0.
Official sources
- [1]npm/cli README at v12.2.0(2026-10-04)
- [2]npm CLI documentation(2026-10-04)
- [3]npm/cli package manifest at v12.2.0(2026-10-04)
- [4]npm/cli LICENSE at v12.2.0(2026-10-04)
- [5]npm CLI v12.2.0 release(2026-10-04)
Supplemental curator note
Evaluate both lockfile reproducibility and which scripts may run during installation. The CLI and npm registry have separate terms, so include private-registry and publishing requirements in the comparison.
Try it in 3 steps
- 1
Create an evaluation package
Use the installed npm to create package.json in an empty directory. This workflow was executed with npm 11.16.0; it does not claim that npm v12.2.0 was installed.
mkdir npm-cli-demo && cd npm-cli-demo && npm init --yes - 2
Generate a lockfile safely
Exercise lockfile generation without running dependency lifecycle scripts.
npm install --package-lock-only --ignore-scripts - 3
Inspect package metadata
Confirm that npm reads the name and version from the generated package.json.
npm pkg get name version
Growth
Growth trends · Last 30 days
10,170 Stars
Trend data is still being collected.
Development activity
Last 90 days · weekly
- Commits (last 30 days)
- 8
- Open PRs
- 171
Development activity is still being collected.
Built with
Categories and tags
Categories
GitHub data
GitHub dataView detailed GitHub data
GitHub Topics
- package-manager
- npm
- nodejs
- javascript
- tools
- npm-cli
- Stars
- 10,170
- Forks
- 4,807
- Watchers
- 242
- Open issues
- 636
- Contributors
- 1,021
- Owner type
- Organization
- Primary language
- JavaScript
- License
- Not determined
- Repository last updated
- Oct 1, 2026
Related information
Write a related articleShare a guide or use case for this OSS in Markdown. Articles are published after administrator approval.
Explore next
- dotenvx5,826 Stars
2 shared tag(s) · 1 shared category(s) · Same language
encrypt .env values for version control and decrypt them into environment variables at runtime
JavaScript - fake-indexeddb695 Stars
2 shared tag(s) · 1 shared category(s) · Same language
recreate the IndexedDB API in memory for Node.js tests
JavaScript - pnpm36,737 Stars
4 shared tag(s) · 2 shared category(s)
share dependency files through a content-addressable store and manage monorepos
Rust - Node.js122,253 Stars
3 shared tag(s) · 1 shared category(s) · Same language
Run JavaScript for API servers, command-line tools, and development automation
JavaScript - i18next8,637 Stars
3 shared tag(s) · 1 shared category(s) · Same language
keep translation keys, plurals, interpolation, and resource loading independent of the UI framework
JavaScript - Electron123,376 Stars
3 shared tag(s) · 1 shared category(s)
bundle Chromium and Node.js to build desktop applications for three major operating systems with HTML, CSS, and JavaScript
C++
Report incorrect information
Tell us if any listing information is incorrect or outdated.