Npm
npm Node.js package manager and registry. Use for JavaScript dependencies.From its SKILL.md
npx -y skills add G1Joshi/Agent-Skills --skill npmAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
One thing to look at
- 12 stars12 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
SKILL.md
1.2 KB, 291 tokens by cl100k_base, as published. Nobody here has run it
npm
npm is the default package manager for Node.js. v11 (2025) introduces strict publishing rules and npx caching improvements.
When to Use
- Default: It comes with Node. Zero friction.
- Compatibility: The standard
package-lock.jsonis supported everywhere. - Publishing:
npm publishis the canonical way to share JS code.
Quick Start
npm init -y
npm install lodash
npm install --save-dev jest
# Monorepo
npm init -w packages/my-lib
Core Concepts
package.json
Manifest file. Scripts, dependencies, metadata.
package-lock.json
Locks dependency tree for reproducible builds. Commit this.
Workspaces
Native monorepo support.
npm install installs dependencies for root and all nested packages.
Best Practices (2025)
Do:
- Use
npm ci: For CI/CD pipelines. Faster and strict (fails if lockfile doesn't match). - Audit:
npm auditto find vulnerabilities. - Use Scopes:
@my-org/my-pkgto avoid name collisions.
Don't:
- Don't mix managers: Don't use
yarnin a repo withpackage-lock.json.
References
What ships with it
Read from the repository
Just SKILL.md. No reference files, no scripts.