CodeVetter · Repo Unpack · Feature catalog
npm/cli
The command registry spans dependency maintenance, package inspection, script execution, registry administration, publishing, and developer assistance. Commands support aliases and abbreviations, with workspace behavior determined by command metadata. Specialized surfaces manage script approvals, patches, trusted publishing, and staged release approval. The catalog below groups registered commands; detailed implementation inspection concentrated on installation, execution, authentication, auditing, and publishing.
- Dependency maintenance commands include install, ci, update, uninstall, dedupe, find-dupes, prune, rebuild, and link; install supports global mode, workspace selection, package-lock-only, platform filters, and source restrictions.
- Inspection and discovery commands include ls, ll, explain, query, outdated, diff, sbom, fund, search, and view; audit implements advisory reporting, fix, and installed-package signature verification.
- Execution and project workflows include run, exec, start, stop, restart, test, install-test, install-ci-test, init, edit, and explore; npx maps to exec, and run supports script listing plus workspace execution.
- Release commands include pack, publish, unpublish, version, dist-tag, deprecate, and undeprecate; stage exposes publish, list, view, approve, reject, and download with deferred proof-of-presence.
- Account and registry administration commands include access, org, owner, team, profile, token, login, logout, and whoami; trust provides GitHub, GitLab, CircleCI, list, and revoke subcommands.
- Configuration and local diagnostics are registered as config, get, set, pkg, cache, doctor, ping, prefix, and root; command validation rejects unknown CLI options while unknown file settings warn unless strict-npmrc is enabled.
- Help and navigation commands include help, help-search, docs, bugs, repo, and completion; command classes generate usage from descriptions, aliases, parameters, definitions, and subcommand tables.
- Policy and repair features include install-scripts approve/deny/ls/prune, approve-scripts and deny-scripts, patch add/commit/update/ls/rm, and min-release-age filtering with exemptions and blocked-audit-fix reporting.