NPM-ACCESS(1) General Commands Manual NPM-ACCESS(1)
NAME
npm-access
Synopsis
<!-- AUTOGENERATED USAGE DESCRIPTIONS -->
Description
Used to set access controls on private packages.
For all of the subcommands, npm access will perform actions on the
packages
in the current working directory if no package name is passed to the
subcommand.
• public / restricted (deprecated):
Set a package to be either publicly accessible or restricted.
• grant / revoke (deprecated):
Add or remove the ability of users and teams to have read-only or
read-write
access to a package.
• 2fa-required / 2fa-not-required (deprecated):
Configure whether a package requires that anyone publishing it have
two-factor
authentication enabled on their account.
• ls-packages (deprecated):
Show all of the packages a user or a team is able to access, along
with the
access level, except for read-only public packages (it won't print
the whole
registry listing)
• ls-collaborators (deprecated):
Show all of the access privileges for a package. Will only show per-
missions
for packages to which you have at least read access. If <user> is
passed in,
the list is filtered only to teams that user happens to belong to.
• edit (not implemented)
Details
npm access always operates directly on the current registry, config-
urable
from the command line using --registry=<registry url>.
Unscoped packages are always public.
Scoped packages default to restricted, but you can either publish them
as
public using npm publish --access=public, or set their access as public
using
npm access public after the initial publish.
You must have privileges to set the access of a package:
• You are an owner of an unscoped or scoped package.
• You are a member of the team that owns a scope.
• You have been given read-write privileges for a package, either as a
member
of a team or directly as an owner.
If you have two-factor authentication enabled then you'll be prompted
to
provide an otp token, or may use the --otp=... option to specify it on
the command line.
If your account is not paid, then attempts to publish scoped packages
will
fail with an HTTP 402 status code (logically enough), unless you use
--access=public.
Management of teams and team memberships is done with the npm team com-
mand.
Configuration
<!-- AUTOGENERATED CONFIG DESCRIPTIONS -->
See Also
• libnpmaccess
• npm team
• npm publish
• npm config
• npm registry
9.2.0 December 2022 NPM-ACCESS(1)
Generated by dwww version 1.15 on Sat Jun 29 02:15:45 CEST 2024.