Demystifying npm: What Actually Happens When You Install and Publish

" summary

Explains the internals of npm's install and publish lifecycles, including how dependency resolution, package publishing, and related security considerations work behind the scenes. Covers modern best practices and decision-making techniques developers can use to avoid surprises when installing or publishing packages, aimed at both newer and experienced JavaScript engineers.

AI-written summary · about

" related talks

• 19mWhat You’re Really Trusting When You Run npm installKaren Li · dotJS 2026
• 22m#unpublish Happens — How to protect your Node.js InvestmentIgor Soarez · swampUP 2016
• 24mThe Ins-and-Outs of Publishing a Module to npmSteve Kinney · npm camp 2016
• 38mThe npm workflowLaurie Voss · enterJS 2016
• 31mWhat everybody should know about npmLaurie Voss · JSConf Budapest 2016
• 24mPublishing in the JavaScript Ecosystem & Keeping Users HappyTrivikram Kamat · CascadiaJS 2022
• 44mYou Don't Know npmAshley Williams · JavaScript fwdays'17
• 35mnpm Scripts and SecurityThomas Crevoisier · Best of Web 2018