File Explorer

1.TH "DEVELOPERS" "7" "February 2026" "NPM@11.11.0" ""2.SH "NAME"3\fBDevelopers\fR - Developer guide4.SS "Description"5.P6So, you've decided to use npm to develop (and maybe publish/deploy) your project.7.P8Fantastic!9.P10There are a few things that you need to do above the simple steps that your users will do to install your program.11.SS "About These Documents"12.P13These are man pages. If you install npm, you should be able to then do \fBman npm-thing\fR to get the documentation on a particular topic, or \fBnpm help thing\fR to see the same information.14.SS "What is a Package"15.P16A package is:17.RS 018.IP \(bu 419a) a folder containing a program described by a package.json file20.IP \(bu 421b) a gzipped tarball containing (a)22.IP \(bu 423c) a url that resolves to (b)24.IP \(bu 425d) a \fB<name>@<version>\fR that is published on the registry with (c)26.IP \(bu 427e) a \fB<name>@<tag>\fR that points to (d)28.IP \(bu 429f) a \fB<name>\fR that has a "latest" tag satisfying (e)30.IP \(bu 431g) a \fBgit\fR url that, when cloned, results in (a).32.RE 033 34.P35Even if you never publish your package, you can still get a lot of benefits of using npm if you just want to write a node program (a), and perhaps if you also want to be able to easily install it elsewhere after packing it up into a tarball (b).36.P37Git urls can be of the form:38.P39.RS 240.nf41git://github.com/user/project.git#commit-ish42git+ssh://user@hostname:project.git#commit-ish43git+http://user@hostname/project/blah.git#commit-ish44git+https://user@hostname/project/blah.git#commit-ish45.fi46.RE47.P48The \fBcommit-ish\fR can be any tag, sha, or branch which can be supplied as an argument to \fBgit checkout\fR. The default is whatever the repository uses as its default branch.49.SS "The package.json File"50.P51You need to have a \fBpackage.json\fR file in the root of your project to do much of anything with npm. That is basically the whole interface.52.P53See \fB\[rs]fBpackage.json\[rs]fR\fR \fI\(la/configuring-npm/package-json\(ra\fR for details about what goes in that file. At the very least, you need:54.RS 055.IP \(bu 456name: This should be a string that identifies your project. Please do not use the name to specify that it runs on node, or is in JavaScript. You can use the "engines" field to explicitly state the versions of node (or whatever else) that your program requires, and it's pretty well assumed that it's JavaScript.57.P58It does not necessarily need to match your github repository name.59.P60So, \fBnode-foo\fR and \fBbar-js\fR are bad names. \fBfoo\fR or \fBbar\fR are better.61.IP \(bu 462version: A semver-compatible version.63.IP \(bu 464engines: Specify the versions of node (or whatever else) that your program runs on. The node API changes a lot, and there may be bugs or new functionality that you depend on. Be explicit.65.IP \(bu 466author: Take some credit.67.IP \(bu 468scripts: If you have a special compilation or installation script, then you should put it in the \fBscripts\fR object. You should definitely have at least a basic smoke-test command as the "scripts.test" field. See npm help scripts.69.IP \(bu 470main: If you have a single module that serves as the entry point to your program (like what the "foo" package gives you at require("foo")), then you need to specify that in the "main" field.71.IP \(bu 472directories: This is an object mapping names to folders. The best ones to include are "lib" and "doc", but if you use "man" to specify a folder full of man pages, they'll get installed just like these ones.73.RE 074 75.P76You can use \fBnpm init\fR in the root of your package in order to get you started with a pretty basic package.json file. See npm help init for more info.77.SS "Keeping files \fIout\fR of your Package"78.P79Use a \fB.npmignore\fR file to keep stuff out of your package. If there's no \fB.npmignore\fR file, but there \fIis\fR a \fB.gitignore\fR file, then npm will ignore the stuff matched by the \fB.gitignore\fR file. If you \fIwant\fR to include something that is excluded by your \fB.gitignore\fR file, you can create an empty \fB.npmignore\fR file to override it. Like \fBgit\fR, \fBnpm\fR looks for \fB.npmignore\fR and \fB.gitignore\fR files in all subdirectories of your package, not only the root directory.80.P81\fB.npmignore\fR files follow the \fBsame pattern rules\fR \fI\(lahttps://git-scm.com/book/en/v2/Git-Basics-Recording-Changes-to-the-Repository#_ignoring\(ra\fR as \fB.gitignore\fR files:82.RS 083.IP \(bu 484Blank lines or lines starting with \fB#\fR are ignored.85.IP \(bu 486Standard glob patterns work.87.IP \(bu 488You can end patterns with a forward slash \fB/\fR to specify a directory.89.IP \(bu 490You can negate a pattern by starting it with an exclamation point \fB!\fR.91.RE 092 93.P94By default, some paths and files are ignored, so there's no need to add them to \fB.npmignore\fR explicitly. Some examples are:95.RS 096.IP \(bu 497\fB.*.swp\fR98.IP \(bu 499\fB._*\fR100.IP \(bu 4101\fB.DS_Store\fR102.IP \(bu 4103\fB.git\fR104.IP \(bu 4105\fB.gitignore\fR106.IP \(bu 4107\fB.hg\fR108.IP \(bu 4109\fB.npmignore\fR110.IP \(bu 4111\fB.npmrc\fR112.IP \(bu 4113\fB.lock-wscript\fR114.IP \(bu 4115\fB.svn\fR116.IP \(bu 4117\fB.wafpickle-*\fR118.IP \(bu 4119\fBconfig.gypi\fR120.IP \(bu 4121\fBCVS\fR122.IP \(bu 4123\fBnpm-debug.log\fR124.RE 0125 126.P127Additionally, everything in \fBnode_modules\fR is ignored, except for bundled dependencies. npm automatically handles this for you, so don't bother adding \fBnode_modules\fR to \fB.npmignore\fR.128.P129The following paths and files are never ignored, so adding them to \fB.npmignore\fR is pointless:130.RS 0131.IP \(bu 4132\fBpackage.json\fR133.IP \(bu 4134\fBREADME\fR (and its variants)135.IP \(bu 4136\fBLICENSE\fR / \fBLICENCE\fR137.RE 0138 139.P140If, given the structure of your project, you find \fB.npmignore\fR to be a maintenance headache, you might instead try populating the \fBfiles\fR property of \fBpackage.json\fR, which is an array of file or directory names that should be included in your package. Sometimes manually picking which items to allow is easier to manage than building a block list.141.P142See \fB\[rs]fBpackage.json\[rs]fR\fR \fI\(la/configuring-npm/package-json\(ra\fR for more info on what can and can't be ignored.143.SS "Testing whether your \fB.npmignore\fR or \fBfiles\fR config works"144.P145If you want to double check that your package will include only the files you intend it to when published, you can run the \fBnpm pack\fR command locally which will generate a tarball in the working directory, the same way it does for publishing.146.SS "Link Packages"147.P148\fBnpm link\fR is designed to install a development package and see the changes in real time without having to keep re-installing it. (You do need to either re-link or \fBnpm rebuild -g\fR to update compiled packages, of course.)149.P150More info at npm help link.151.SS "Before Publishing: Make Sure Your Package Installs and Works"152.P153\fBThis is important.\fR154.P155If you cannot install it locally, you'll have problems trying to publish it. Or, worse yet, you'll be able to publish it, but you'll be publishing a broken or pointless package. So don't do that.156.P157In the root of your package, do this:158.P159.RS 2160.nf161npm install . -g162.fi163.RE164.P165That'll show you that it's working. If you'd rather just create a symlink package that points to your working directory, then do this:166.P167.RS 2168.nf169npm link170.fi171.RE172.P173Use \fBnpm ls -g\fR to see if it's there.174.P175To test a local install, go into some other folder, and then do:176.P177.RS 2178.nf179cd ../some-other-folder180npm install ../my-package181.fi182.RE183.P184to install it locally into the node_modules folder in that other place.185.P186Then go into the node-repl, and try using require("my-thing") to bring in your module's main module.187.SS "Create a User Account"188.P189Create a user with the adduser command. It works like this:190.P191.RS 2192.nf193npm adduser194.fi195.RE196.P197and then follow the prompts.198.P199This is documented better in npm help adduser.200.SS "Publish your Package"201.P202This part's easy. In the root of your folder, do this:203.P204.RS 2205.nf206npm publish207.fi208.RE209.P210You can give publish a url to a tarball, or a filename of a tarball, or a path to a folder.211.P212Note that pretty much \fBeverything in that folder will be exposed\fR by default. So, if you have secret stuff in there, use a \fB.npmignore\fR file to list out the globs to ignore, or publish from a fresh checkout.213.SS "Brag about it"214.P215Send emails, write blogs, blab in IRC.216.P217Tell the world how easy it is to install your program!218.SS "See also"219.RS 0220.IP \(bu 4221npm help npm222.IP \(bu 4223npm help init224.IP \(bu 4225\fBpackage.json\fR \fI\(la/configuring-npm/package-json\(ra\fR226.IP \(bu 4227npm help scripts228.IP \(bu 4229npm help publish230.IP \(bu 4231npm help adduser232.IP \(bu 4233npm help registry234.RE 0235