Quelltext der Seite Benutzer:Andreas Plank/npm

https://www.sitepoint.com/beginners-guide-node-package-manager/

Note, that <code>npm</code> is separate from Node.js and with <code>nvm</code> one can install multiple versions of Node.js

== Common Commands ==

<code>npm help</code>

…&nbsp;or a brief list of some of the commonly used <code>npm</code> aliases:
* <code>npm i package</code> – install local package
* <code>npm i -g package package</code> – install global package
* <code>npm un package package</code> – uninstall local package
* <code>npm up</code> – npm update packages
* <code>npm t</code> – run tests
* <code>npm ls</code> – list installed modules
* <code>npm ll</code> or <code>npm la</code> – print additional package information while listing modules

<syntaxhighlight lang="bash">
# search a package
npm search mkdir

# show config variables
npm config list

# update to the latest npm ?globally
npm install npm@latest -g

# to save explicitly the dependency in package.json
npm install package --save

# check for outdated packages
npm outdated
</syntaxhighlight>

== Check for security vulnerabilities: audit ==

<syntaxhighlight lang="bash">
# example
npm install express@4.8.0
# express@4.8.0
# added 36 packages from 24 contributors and audited 123 packages in 15.97s
# found 21 vulnerabilities (8 low, 9 moderate, 4 high)
#   run `npm audit fix` to fix them, or `npm audit` for details

# show and report vulnerabilities
npm run audit
#   it may report to install a higher version so one could run
#     npm install express@4.16.4 
#   as the report may have suggested, or run 
#     npm audit 
#   to fix it

# if you don’t mind upgrading packages with breaking changes, run
npm audit fix --force
</syntaxhighlight>


== Package Versioning and Managing ==

<syntaxhighlight lang="bash">
# list package cache and things 
ls ~/.npm
# anonymous-cli-metrics.json  _cacache  index-v5  _locks  _logs  node-sass
# This directory will get cluttered with old packages over time, so it’s useful 
# to clean it up occasionally.
npm cache clean --force

# clean downloaded packages in *all* node_modules folders that it can find
find . -name "node_modules" -type d -exec rm -rf '{}' +
</syntaxhighlight>

== Semantic Versioning ==

scheme <code>major.minor.patch</code>, e.g. <code>2.1.4</code>
* start version: <code>0.1.0</code>
* before <code>1.0.0</code> is only developmental mode

== Node.js using nvm ==

https://www.sitepoint.com/quick-tip-multiple-versions-node-nvm/

=== List installed instances ===

<syntaxhighlight lang="bash">
nvm ls
</syntaxhighlight>

=== Switch Versions ===

<syntaxhighlight lang="bash">
# switch to Node.js version 8.9.4
nvm use 8.9.4
# switch to Node.js version 9.3.0
nvm use 9.3
# switch to latest Node.js version
nvm use node
# switch to latest LTS Node.js version
nvm use node --lts
</syntaxhighlight>

=== Uninstall ===

<syntaxhighlight lang="bash">
nvm uninstall 0.11
</syntaxhighlight>