Reply to post: Npm packages can already be distributed from Github. Scoped packages names are free.

GitHub fixes authorisation vulnerability in the NPM JavaScript package registry

Anonymous Coward
Anonymous Coward

Npm packages can already be distributed from Github. Scoped packages names are free.

You can configure npm to publish packages to GitHub Packages and to use packages stored on GitHub Packages as dependencies in an npm project. See:

https://docs.github.com/en/packages/working-with-a-github-packages-registry/working-with-the-npm-registry

The packages URL's are therefore effectively scoped and therefore within-same-project packages can easily be seen as coming from the same source. (Scoped packages names on NPM cost $7/month per scope, which is rather expensive.).

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon