npm

npx

When to Use

• Default: It comes with Node. Zero friction.
• Compatibility: The standard

  package-lock.json

  is supported everywhere.
• Publishing:

  npm publish

  is the canonical way to share JS code.

Quick Start

npm init -y
npm install lodash
npm install --save-dev jest

# Monorepo
npm init -w packages/my-lib

Core Concepts

package.json

package-lock.json

Workspaces

npm install

Best Practices (2025)

• Use

  npm ci

  : For CI/CD pipelines. Faster and strict (fails if lockfile doesn't match).
• Audit:

  npm audit

  to find vulnerabilities.
• Use Scopes:

  @my-org/my-pkg

  to avoid name collisions.

• Don't mix managers: Don't use

  yarn

  in a repo with

  package-lock.json

  .

References

• npm Documentation