No posts found for this topic.
npm Resources, Tutorials and Guides
npm is the package registry and tooling at the heart of the JavaScript ecosystem. This hub gathers guides on managing dependencies, publishing packages, understanding versioning, and keeping projects secure.
5 articles · Updated June 10, 2022
Every dependency is code you now maintain by proxy. Audit before you add, and keep your lockfile committed.
Related topics
Featured articles
Hand-picked and latest articles from this topic.
Monorepo Setup with NPM and TypeScript
January 21, 2022
How to Run 'npm run build' on a Low Spec Server?
April 12, 2021
From Basics
Quick-reference cheatsheets for tools and libraries in this space.
External resources
Curated tools, docs, and communities worth bookmarking.
Frequently asked questions
Quick answers about this topic hub.
What's the difference between dependencies and devDependencies?▾
Dependencies are packages your app needs at runtime, while devDependencies are only needed during development — things like test runners, bundlers, and linters. Separating them keeps production installs lean.
What does the package-lock.json file do?▾
It records the exact versions of every installed package (including nested ones) so installs are reproducible across machines and over time. Always commit it to keep your team on identical dependency trees.
How do I keep dependencies secure?▾
Run npm audit to check for known vulnerabilities, keep packages updated, minimize how many you add, and review new dependencies before installing. Supply-chain security starts with what you choose to pull in.