npm
npm is a JavaScript package registry and command-line tool. It installs, lists, and publishes packages, and runs project scripts.
Another example
CI runs npm ci from the committed lockfile and runs the test script. It gets the same dependency tree as local checks.
Main parts
- 01Code or behavior under test
- 02Observable evidence
- 03Coverage, failure, and recovery
Use it when
Use it for Node dependencies and shared project scripts. Review and commit the lockfile on purpose.
Do not use it when
Do not mix package managers, ignore install scripts, publish secrets, or change lockfiles by accident.
Name used in code
package.json + package-lock.json + npm ci Before you ship
Check the runtime and version, integration limits, dependencies and licenses, and platform support. Verify security, failure, speed, monitoring, deploy, support owner, upgrade path, and rollback.
Outcome: Use or review npm as a technical building block that the team can maintain. User context: CI runs npm ci from the committed lockfile and runs the test script. It gets the same dependency tree as local checks. Technology or engineering concept: npm. Why it fits: Use it for Node dependencies and shared project scripts. Review and commit the lockfile on purpose. Do not use it when: Do not mix package managers, ignore install scripts, publish secrets, or change lockfiles by accident. Engineering fit: Define where it runs and which version to use. Set its job, interfaces, data flow, dependencies, supported systems, security, and speed limits. Explain how it fits the current stack. Lifecycle safeguards: Check dependency health and licenses. Add monitoring and a fallback. Name the upgrade owner. Do not add a second tool for the same job without a measured benefit. Acceptance criteria: A small integration proves the needed behavior. Test compatibility, security, failure, and performance. Document deploy, upgrade, support, and rollback steps. Evidence and limits (evidence boundary): It is official for that source. Other platforms or teams may use the term in another way. Unknowns to confirm: Current stack, runtime and version rules, target systems, dependency owner, performance budget, support period, and migration limits.
Check this request
Review the current use of npm. Definition: npm is a JavaScript package registry and command-line tool. It installs, lists, and publishes packages, and runs project scripts. Release checks: Check the runtime and version, integration limits, dependencies and licenses, and platform support. Verify security, failure, speed, monitoring, deploy, support owner, upgrade path, and rollback. Before changing code, report the evidence you found, gaps, severity, and the smallest safe fix.