Issues

• [BUG] Fresh trusted-publisher entry rejected with "package not found" for hours before the exchange accepts it

  npm/cli#10265 · Filter by author igorjpimenta opened on Nov 8, 2026

• [BUG] <title>

  BugNeeds Triage
  npm/cli#10264 · Filter by author nankidelta-ai opened on Nov 8, 2026

• [BUG] <title>nanky

  BugNeeds Triage
  npm/cli#10263 · Filter by author nankidelta-ai opened on Nov 8, 2026

• [BUG] <title>

  BugNeeds Triage
  npm/cli#10261 · Filter by author ryen201 opened on Nov 8, 2026

• [BUG] npm 12 pack/publish drops files named like [slug].js that match a files glob

  npm/cli#10260 · Filter by author trackoor opened on Nov 7, 2026
  1

• npm update --package-lock-only drops lock entries for unpublished optional dependencies, then npm ci rejects the lock

  npm/cli#10258 · Filter by author ArjunRachithcf opened on Nov 7, 2026
  1

• npm update react --package-lock-only fails with ERESOLVE where npm update --package-lock-only succeeds

  npm/cli#10257 · Filter by author ArjunRachithcf opened on Nov 7, 2026

• [BUG] npm install materializes registry dependency devDependencies from a pnpm tree

  npm/cli#10255 · Filter by author coygeek opened on Nov 7, 2026

• [BUG] bundleDependencies are not installed from a git dependency that also has registry dependencies

  npm/cli#10250 · Filter by author privatenumber opened on Nov 6, 2026

• [BUG] Commit-pinned git dependencies on non-hosted repositories are deduplicated across different commits

  npm/cli#10249 · Filter by author privatenumber opened on Nov 6, 2026

• [BUG] npm diff drops a final blank context line, so its output is a corrupt patch

  Bugcmd:diffNeeds Triage
  npm/cli#10230 · Filter by author simshanith opened on Nov 5, 2026
  1

• [BUG] npm sbom -g crashes on the synthetic global root in both formats

  npm/cli#10225 · Filter by author coygeek opened on Nov 4, 2026

• [BUG] npm uninstall -g deletes a bin link pointing into another installed package

  npm/cli#10219 · Filter by author coygeek opened on Nov 4, 2026

• [BUG] npx retries forever and runs out of memory when it cannot create its concurrency.lock

  npm/cli#10214 · Filter by author mithredate opened on Nov 3, 2026

• [BUG] npm ci fails with "Missing: <pkg>@ from lock file" when an optional dependency is unpublished

  Bugcmd:ciPriority 2regression:11.x
  npm/cli#10193 · Filter by author pavel-golance opened on Oct 29, 2026
  1

• [BUG] interactive terminal check is flawed, and interactive prompts shouldn't go to stdout

  BuginteractivePriority 3
  npm/cli#10190 · Filter by author jedwards1211 opened on Oct 29, 2026
  1

• [BUG] install-scripts prune and ls miss the prepare script of a git dependency

  allowScriptsBugPriority 3
  npm/cli#10182 · Filter by author oldium opened on Oct 28, 2026
  1

• global update silently drops a platform-specific optional dependency

  Bugcmd:updateconfig:globalPriority 2
  npm/cli#10173 · Filter by author nkolev92 opened on Oct 27, 2026

• [BUG] npx keeps an idle npm process alive for the whole lifetime of the command it runs

  cmd:execDCRPriority 3
  npm/cli#10165 · Filter by author Finomosec opened on Oct 27, 2026

• [BUG] npm ls --workspaces=false crashes with an uninstalled root dependency

  BugPriority 3
  npm/cli#10157 · Filter by author philSixZero opened on Oct 23, 2026
  1

• [BUG] npm install never finishes when a dependency has no matching version and two packages peer on it (11.21.1, 12.2.1)

  Priority 1regression:11.xws:arborist
  npm/cli#10149 · Filter by author knutwannheden opened on Oct 21, 2026

• [BUG] allow-file=none|root breaks npm publish

  Bugcmd:publishPriority 3
  npm/cli#10144 · Filter by author ericcornelissen opened on Oct 20, 2026

• [BUG] npm pkg delete removes the first array item for a nonexistent property

  cmd:deletePriority 3
  npm/cli#10141 · Filter by author drawliin opened on Oct 19, 2026

• [BUG] Windows: EEXIST on bin shims that npm wrote itself (bundled read-cmd-shim 7.0.0 cannot read the $basedir_win shims of cmd-shim 9.0.2)

  BugPriority 2
  npm/cli#10140 · Filter by author ar27111994 opened on Oct 17, 2026
  

• [BUG] npm ci accepts a lockfile that violates overrides when a hoisted package is reached through multiple override scopes

  config:overridesPriority 2
  npm/cli#10137 · Filter by author szegedi opened on Oct 16, 2026