Search results

[BUG] <title>

Bugthing that needs fixingthing that needs fixing

Needs Triageneeds review for next stepsneeds review for next steps

Status: Open.

#9070 In npm/cli;

· gcarmonatellez16-sys opened on Mar 5, 2026

Proposal: set default min-release-age to 7 days

Bugthing that needs fixingthing that needs fixing

Needs Triageneeds review for next stepsneeds review for next steps

Status: Open.

#9068 In npm/cli;

· mhoye opened on Mar 5, 2026

[BUG] Overrides doesn't override versions of npm depdencies

Bugthing that needs fixingthing that needs fixing

Needs Triageneeds review for next stepsneeds review for next steps

Status: Open.

#9062 In npm/cli;

· humphreyn opened on Mar 5, 2026

feat: npm audit signatures --json --include-attestations to output sigstore attestation bundles

Status: Open.

#9048 In npm/cli;

· mitchdenny opened on Mar 3, 2026

[BUG] <code>install --no-save</code> does not install anything

Needs Triageneeds review for next stepsneeds review for next steps

Status: Open.

#9024 In npm/cli;

· kmhleonwillens opened on Feb 24, 2026

[BUG] <code>min-release-age</code> config error if any dependencies use <code>~</code> version range

Bugthing that needs fixingthing that needs fixing

Priority 2secondary priority issuesecondary priority issue

Status: Open.

#9005 In npm/cli;

· ehoogeveen-medweb opened on Feb 20, 2026

[BUG] NPM Audit Down

Bugthing that needs fixingthing that needs fixing

Needs Triageneeds review for next stepsneeds review for next steps

Status: Open.

#9004 In npm/cli;

· hackerman-jpeg opened on Feb 20, 2026

Add package exclusion support for min-release-age

Status: Open.

#8994 In npm/cli;

· camelmasa opened on Feb 19, 2026

[BUG] Inconsistent output of 'npm audit'

Bugthing that needs fixingthing that needs fixing

Needs Triageneeds review for next stepsneeds review for next steps

Status: Open.

#8989 In npm/cli;

· rfalke-rtl opened on Feb 18, 2026

[BUG] package-lock.json should reevaluate consistently when overrides change

Bugthing that needs fixingthing that needs fixing

Needs Triageneeds review for next stepsneeds review for next steps

Status: Open.

#8986 In npm/cli;

· dwjohnston opened on Feb 17, 2026

[BUG] <code>dependencies</code> hook is not triggered when dependencies change for a local dependency

Bugthing that needs fixingthing that needs fixing

Needs Triageneeds review for next stepsneeds review for next steps

Status: Open.

#8984 In npm/cli;

· LeaVerou opened on Feb 16, 2026

(FR): Implement exclusion mechanism for 'minimumReleaseAge' feature for CVE mitigation

Status: Open.

#8979 In npm/cli;

· dburrows opened on Feb 16, 2026