DEV Community

Discussion on: Control your npm packages & avoid dependency confusion

Collapse
 
archerl profile image
realArcherL • Edited

Great article! :)

I am little confused, what did the author meant by saying

Blocking the ability for packages with the same name (inside the scope) to be pulled from the public registry by accident.

Like is this an option a user has to enable? Or is it more like preventing a scenario where the dev accidentally makes this call

npm i some-private-package

instead of

npm i @copmany/some-private-package

Thanks!