More npm changes coming

[TotallyInformation]

Quick head's-up:

npm publish-time malware scanning and dual-use metadata - GitHub Changelog

The new check takes some time so they are saying that there will be at least a 5 minute delay after publishing before the new version is actually live - currently it is pretty much instantaneous. It is also possible that published versions might get blocked.

---

You might also find this article useful:

The secure way to release an npm package in 2026—Martian Chronicles, Evil...