DEV Community

Discussion on: An Easy Guide to Publishing npm packages

Collapse
 
jankapunkt profile image
Jan Küster

Please also consider the following important tools:

  • npm publish --dry-run for testing if everything will be published.
  • enable 2FA with TOTP for publishing to help reduce supply chain attacks
  • prepublish hook to run tests, lint and audit before publish

Let's all make the ecosystem more safe.for everyone 🤝