-
Notifications
You must be signed in to change notification settings - Fork 4.7k
All issues
Issue creation is restricted in this repository
- #8153 · pplmx opened
on Mar 10, 2025 61 - #8535 · liamcmitchell opened
on Aug 27, 2025 18
Issues
is:issue state:open
is:issue state:open
Search results
[BUG] A user/local .npmrc allow-scripts setting is forwarded to an inner npm install spawned by npm run-script and fails with EALLOWSCRIPTS
Bugthing that needs fixingthing that needs fixingcmd:run-scriptrelated to `npm run-script`related to `npm run-script`Needs Triageneeds review for next stepsneeds review for next stepsStatus: Open.#9912 In npm/cli;[BUG] npm install -g crashes: Cannot read properties of null (reading 'children') when a peer set resolves across multiple prerelease lines
Bugthing that needs fixingthing that needs fixingcmd:installrelated to `npm install`related to `npm install`Needs Triageneeds review for next stepsneeds review for next stepsws:arboristRelated to the arborist workspaceRelated to the arborist workspaceStatus: Open.#9911 In npm/cli;[BUG] npm fails to find hoisted bin files in monorepo when parent directory path contains a ':' character
Bugthing that needs fixingthing that needs fixingcmd:run-scriptrelated to `npm run-script`related to `npm run-script`config:workspacesrelated to `--workspaces`related to `--workspaces`Needs Triageneeds review for next stepsneeds review for next stepsplatform: linuxis Linux specificis Linux specificStatus: Open.#9910 In npm/cli;[BUG] npm notice run npx, npm notice run 'cypress' --version
Bugthing that needs fixingthing that needs fixingcmd:execrelated to `npx`related to `npx`ws:libnpmexecRelated to the libnpmexec workspaceRelated to the libnpmexec workspaceStatus: Open.#9893 In npm/cli;[BUG] install hangs indefinitely instead of failing with ETARGET when --min-release-age rejects the requested version
Bugthing that needs fixingthing that needs fixingcmd:installrelated to `npm install`related to `npm install`ws:arboristRelated to the arborist workspaceRelated to the arborist workspaceStatus: Open.#9891 In npm/cli;npm exec (npx) links bins to the wrong directory when run from a global install's lifecycle script, causing "command not found" and install rollback
Bugthing that needs fixingthing that needs fixingcmd:execrelated to `npx`related to `npx`ws:libnpmexecRelated to the libnpmexec workspaceRelated to the libnpmexec workspaceStatus: Open.#9890 In npm/cli;[BUG] 409 "Cannot publish over previously staged version" for a package that never used staged publishing
Bugthing that needs fixingthing that needs fixingRegistryspecific to registry implementationspecific to registry implementationStatus: Open.#9889 In npm/cli;[BUG] Trusted publishing auto-provenance silently discards the
--provenance-filebundleBugthing that needs fixingthing that needs fixingcmd:publishrelated to `npm publish`related to `npm publish`Priority 2secondary priority issuesecondary priority issuews:libnpmpublishRelated to the libnpmpublish workspace.Related to the libnpmpublish workspace.Status: Open.#9879 In npm/cli;[BUG]
npm ls --json --longoutputs nothing and exits 1 when a deprecation message contains a URL (redaction corrupts compact JSON)Bugthing that needs fixingthing that needs fixingcmd:listrelated to `npm list`related to `npm list`config:displayIssues dealing with display of data to terminalIssues dealing with display of data to terminalPriority 2secondary priority issuesecondary priority issueStatus: Open.#9873 In npm/cli;- Status: Open.#9870 In npm/cli;
[BUG] Direct dependency's bin can be overwritten by a transitive dependency based on lexical package name
Bugthing that needs fixingthing that needs fixingcmd:installrelated to `npm install`related to `npm install`ws:arboristRelated to the arborist workspaceRelated to the arborist workspaceStatus: Open.#9868 In npm/cli;Bundled ip-address dependency vulnerable to SSRF (CVE-2026-69192 / GHSA-mwp4-54f8-5fhr)
DependenciesPull requests that update a dependency filePull requests that update a dependency fileSecuritysecurity relatedsecurity relatedStatus: Open.#9867 In npm/cli;