Issues

Issues

• npm install [<package-spec> ...] aliases: add, i, in, ins, inst, insta, instal, isnt, isnta, isntal, isntall

  npm/cli#10287 · opened on Nov 12, 2026

• [DOCS] <title>

  npm/cli#10286 · opened on Nov 12, 2026

• ## Step 1: Meet the agent team

  npm/cli#10275 · opened on Nov 10, 2026

• [BUG] EACCES on ~/.npmrc is reported as a root-owned cache folder

  npm/cli#10272 · opened on Nov 10, 2026

• Bundled [email protected] is flagged for CVE-2026-84947 (dump interceptor completes oversized chunked responses early); fixed in undici 7.29.1 / 8.10.2

  npm/cli#10271 · opened on Nov 10, 2026

• [BUG] Fresh trusted-publisher entry rejected with "package not found" for hours before the exchange accepts it

  npm/cli#10265 · opened on Nov 8, 2026

• [BUG] npm 12 pack/publish drops files named like [slug].js that match a files glob

  npm/cli#10260 · opened on Nov 7, 2026
  1

• npm update react --package-lock-only fails with ERESOLVE where npm update --package-lock-only succeeds

  npm/cli#10257 · opened on Nov 7, 2026

• [BUG] npm install materializes registry dependency devDependencies from a pnpm tree

  npm/cli#10255 · opened on Nov 7, 2026

• [BUG] bundleDependencies are not installed from a git dependency that also has registry dependencies

  npm/cli#10250 · opened on Nov 6, 2026

• [BUG] Commit-pinned git dependencies on non-hosted repositories are deduplicated across different commits

  npm/cli#10249 · opened on Nov 6, 2026

• [BUG] npm diff drops a final blank context line, so its output is a corrupt patch

  npm/cli#10230 · opened on Nov 5, 2026
  1

• [BUG] npm sbom -g crashes on the synthetic global root in both formats

  npm/cli#10225 · opened on Nov 4, 2026

• [BUG] npm uninstall -g deletes a bin link pointing into another installed package

  npm/cli#10219 · opened on Nov 4, 2026

• [BUG] npx retries forever and runs out of memory when it cannot create its concurrency.lock

  npm/cli#10214 · opened on Nov 3, 2026

• [BUG] npm ci fails with "Missing: <pkg>@ from lock file" when an optional dependency is unpublished

  npm/cli#10193 · opened on Oct 29, 2026
  1

• [BUG] interactive terminal check is flawed, and interactive prompts shouldn't go to stdout

  npm/cli#10190 · opened on Oct 29, 2026
  1

• [BUG] install-scripts prune and ls miss the prepare script of a git dependency

  npm/cli#10182 · opened on Oct 28, 2026
  1

• global update silently drops a platform-specific optional dependency

  npm/cli#10173 · opened on Oct 27, 2026

• [BUG] npx keeps an idle npm process alive for the whole lifetime of the command it runs

  npm/cli#10165 · opened on Oct 27, 2026

• [BUG] npm ls --workspaces=false crashes with an uninstalled root dependency

  npm/cli#10157 · opened on Oct 23, 2026
  1

• [BUG] npm install never finishes when a dependency has no matching version and two packages peer on it (11.21.1, 12.2.1)

  npm/cli#10149 · opened on Oct 21, 2026

• [BUG] allow-file=none|root breaks npm publish

  npm/cli#10144 · opened on Oct 20, 2026

• [BUG] npm pkg delete removes the first array item for a nonexistent property

  npm/cli#10141 · opened on Oct 19, 2026

• [BUG] npm ci accepts a lockfile that violates overrides when a hoisted package is reached through multiple override scopes

  npm/cli#10137 · opened on Oct 16, 2026