Get the latest tech news

Staged publishing and new install-time controls for npm

Today we’re shipping two updates focused on supply-chain security for npm: Staged publishing is generally available. New --allow-* install source flags (--allow-file, --allow-remote, --allow-directory) complement the existing --allow-git flag. Both…

None

Get the Android app