NPM OR YARN.

WHAT IS NPM?

NPM stands for Node Package Manager which is a package manager for nodejs.It have the CLI tool that helps us to install, manage, and remove Node.js packages.Moreover npm is the world's largest Software Registry. The registry contains over 800,000 code packages. Open-source developers use npm to share software. Many organizations also use npm to manage private development.

WHAT IS YARN?

Yarn is introduced by the facebook in 2016 as a replacement of npm.It was developed with an objective to offer more advanced features that npm doesnot have and create a more secure, stable, and efficient product.

DIFFERENCE BETEWEEN NPM AND YARN

1.INSTALLATION
NPM - npm is installed automatically when node is
installed.
YARN - yarn is installed using npm.

             npm install yarn --global

2.LOCK FILE
NPM - npm createes a package-lock.json file
YARN - yarn creates a yarn lock file.

3.SPEED
NPM - npm install packages sequentially
YARN - yarn install packages parallel

4.SECURITY

NPM - Security threats were a significant issue in early versions of NPM. As of version 6, NPM performs a security audit every time you install a package. This helps prevent vulnerabilities and ensures there aren't any conflicting dependencies.

YARN - Yarn performs a security check as a background process while downloading packages. It uses the package license information to ensure it doesn't download any malicious scripts or cause any dependency conflicts.

ADVANTAGES

NPM