Inspect an npm registry package
Read-only
What do risk levels mean?
- Read-only
- Inspects state without changing anything.
- Low risk
- Reversible with a routine follow-up command.
- Medium risk
- Changes state; undo path documented.
- Destructive
- Deletes or overwrites; confirmation required.
Reads registry metadata for a package before installation, including its latest version, license, dependencies, and distribution integrity value.
nodenpmregistry
Parameters
npm package name without a version or tag.
Exact package version or registry tag to inspect.
Commands
Review identity, release, licensing, dependencies, and integrity metadata
npm view "<package>@latest" name version license dependencies dist.integrityVerification
npm view "<package>@latest" versionThe registry returns a version for an accessible package, or npm reports that it cannot be found.
Undo
Not undoable
This recipe only reads registry metadata and changes nothing.
Pitfalls
- Registry metadata is publisher-controlled and is not a substitute for reviewing source, maintainers, provenance, and advisories.
- Private packages require registry authentication configured outside the command.