loading...
Cover image for Announcing npm7

Announcing npm7

ruyadorno profile image Ruy Adorno ・3 min read

It's been a very long and crazy ride but I'm happy to share that the project I've been working so hard since I joined the npm team more than an year ago is finally out! npm7 is the new major version of the npm cli 😍

TLDR; npm install -g npm@7

What's new?

First let's highlight the major additions:

  • workspaces! finally the top-requested feature from our userbase makes its way into a stable release line 🎉
  • auto-installing peer-dependencies again 📦

Improving DX

There are some smaller changes/additions/tweaks that will hopefully continue to help improving the user experience, such as:

  • new npm exec command - same as npx that now lives in the cli 😁
  • a new package-lock format and support to install from yarn.lock files 🚀
  • improved npm audit output! 😎
  • new update notification system for the npm cli
  • ability to install a git/GH pkg from a PR: npm i user/project#pull/123
  • less verbose install output
  • skip pre/post scripts when using --ignore-scripts
  • new system to cache node_modules data that makes npm ls much faster
  • npm ls now defaults to top-level deps only, to see the entire tree you can now run npm ls --all
  • slightly improved npm fund output, highlighting funding urls and properly nesting deps
  • And much, much more!

I did a fanart illustration to celebrate this moment

Clean up work

In reality npm7 is the long due refactor/clean up of the npm cli and it spawns a couple of very important internal packages to our ecosystem which are now the standard Programmatic APIs for npm:

I'm really excited to see what this will enable in the community, for the first time it's going to be a trivial thing to require('@npmcli/arborist') and have the same npm install experience from within userland scripts without the need of spawning any subprocesses 🤩

It's also worth mentioning that a lot of the work that went into this version is making sure every line of code and functionality is well-tested and stable so that we can better iterate on new features and bug fixes moving forward 😊

More?

There are also new options/flags that goes along with some of the new features such as --legacy-peer-deps and --strict-peer-deps that help tweak the behavior of installing peer deps, npm ls --all to see all installed deps since the default is now show top-level only, etc

The team will be working hard on adding more tests and fixing any bugs that managed to slip through our beta test period 😄 Feel free to reach out to us in our GitHub issue tracker that now have the best up-to-date links on how to report bugs, propose new features or get help.

You can also read more about the release in the official channels:


⬇️ Get it now

The npm7 is going to be a part of the upcoming node15 release but if you want to get it first, you can install it now with:

npm install -g npm@7
Enter fullscreen mode Exit fullscreen mode

Happy dependency-installing everyone!

Alt Text

Discussion

pic
Editor guide
Collapse
faraazahmad profile image
Syed Faraaz Ahmad

I was curious, What does the NPM team(s) think of PNPM and if there are plans to build something similar?

Collapse
ruyadorno profile image
Ruy Adorno Author

Personally, I think very highly of pnpm and Yarn (and their respective maintainers) as I think they brought up (and still do) a lot of innovation to JS package managers - that said, we are often going to be looking at what they are bringing to the table as a source of inspiration rather than reproducing their solution to a specific problem.

I believe when you say "if there are plans to build something similar?" you are referring to their "non-flat node_modules" structure 🤔 but regardless the answer is the same: npm has its own way of doing things and solving the dependency management problem and while we'll be inspired by the work of other package managers we won't necessarily change our system to simply replicate a different one.

Now if any major changes (such as implementing a symlink-based non-flat node_modules folder) were to be implemented, the place to keep an eye is the npm RFCs repo where we have discussions with the community on how to change the cli for the better 😊

Sorry this turned into a long answer but it was a good question that I felt like needed a more elaborate response 😄 Thanks and all the best!

Collapse
faraazahmad profile image
Syed Faraaz Ahmad

I was more referring to how pnpm uses symlinks to reduce disk and network usage (and install times!). Could be a very big benefit in developing countries where everyone isn't on a Mac.

Great answer though! I prefer the long answers, shows you're really excited

Keep up the great work!

Collapse
huncyrus profile image
huncyrus

I am curious about backward compatibility. Does an old project break if I will try to use the new npm or not? :D (probably not, but the golder rule: do not upgrade anything until you are not released and hotfixed the product)

Collapse
ruyadorno profile image
Ruy Adorno Author

One of the goals is to try and minimize the breaking changes 😄 but since this is a major version bump there are a few to be expected - in all cases if you want to err on the side of safety then the best thing to do is to wait until v7 lands on npm latest tag as mentioned in the GitHub blog post (that is going to be our equivalent of a LTS release) 😊

Collapse
nickytonline profile image
Nick Taylor (he/him)

Congrats on the release @ruyadorno and team! 🔥

Gym teacher from Glee saying amazing!

Collapse
goxr3plus profile image
GOXR3PLUS STUDIO

Amazing news!!!!!! ❤️👏👏👏

Collapse
ben profile image
Ben Halpern

Congrats!!

Collapse
eltociear profile image
Ikko Ashimine

merry npm!

Collapse
shadowtime2000 profile image
Collapse
shaytamir profile image
shaytamir

astonishing news =]

Collapse
zdev1official profile image
ZDev1Official

Congrats!