npm weekly #155: Beta test 2FA for individual packages today, npm is at ScotlandJS, and join the conversation at npm.community!

npm, Inc.
npm, Inc.
Published in
3 min readJul 19, 2018

2FA protection for packages

Two-factor authentication protection for individual packages is here. You can beta test this feature immediately.

In fact, if you are the maintainer of a popular package, we encourage you to do it as soon as possible. For details on how the beta works, see the full announcement on our blog.

We’re in Edinburgh for ScotlandJS

Are you? If so, don’t miss Katie Fenn, C J Silverio, and Jeff Lembeck’s presentations. Katie is closing out today with her talk, Securing your site like it’s 1999, and Jeff and C J are both scheduled to speak on Friday afternoon. If you can find them, you might just score yourself a cool Scotland-themed sticker, so say hello!

We want to share your story

How do you use npm? If you or your team is building something cool with npm, we want to help promote it far and wide. Let’s partner up to show off what you’ve built. Let’s chat!

npm.community Corner

Have you been to npm.community yet? We’ve officially moved our issue trackers and formal community discussions there, so you’ll want to make an account. Currently, there’s a discussion happening on what it looks like to be a collaborator on npm. Have some thoughts? Let us know!

What we’re reading: CSS: A New Kind Of JavaScript

We enjoyed this thoughtful approach to giving more consideration to the robustness and resilience of CSS from Heydon Pickering. It’s a quick read, but one worth your while. Check out CSS: A New Kind Of JavaScript.

The latest: v6.2.0

Late last week, v6.2.0 landed as latest. This version includes a couple of new features, a fix to SET, a handful of dependency bumps, and a few updates to documentation.

For all of the specifics on v6.2.0 see the release notes on our blog.

To stay up to date on v6.2.0 head over to npm.community and join in the discussion.

Apply to be our Sales Engineer

Do you have a knack for teaching customers the ins and outs of a technical product and helping to customize solutions for them? If so, we’d definitely like to hear from you. Applications for our Sales Engineer role close on July 29, so don’t wait to apply.

For more details, visit npmjs.com/jobs.

We’ll be at Node Summit next week, will you?

Next week, San Francisco plays host to the annual Node.js event, Node Summit. Adam Baldwin and Laurie Voss will both be there to present about npm and security. If you’re in the area, you can still grab a ticket to see them (and maybe even snag a cool sticker in the process) by registering for the event today!

Never thought we’d have something in common with French Wikipedia

This Twitter exchange recently caught our eye. Wikipedia held an AMA about animals, and French Wikimedia responded by saying that wombats were their favorite animal! Click through to see this gif in action.

Start sharing private packages within your organization by upgrading your npm Org account. Learn how to upgrade or get details on working with private packages.

Get this in your inbox! Just subscribe.

--

--

npm, Inc.
npm, Inc.

npm is the package manager for JavaScript and the world’s largest software registry.