2022-02-02.md

Meeting from: February 2nd, 2022

Open RFC Meeting (npm)

Attendees

• Darcy Clarke (@darcyclarke)
• Rhys Arkins (@rarkins)
• Ruy Adorno (@ruyadorno)
• Jordan Harband (@ljharb)
• Owen Buckley (@thescientist13)
• Jean Burellier (@sheplu)

Previously...

• 2022-01-19

Agenda

1. Housekeeping
   1. Introduction(s)
   2. Code of Conduct Acknowledgement
   3. Outline Intentions & Desired Outcomes
   4. Announcements
      • OpenJS World 2022
        • https://events.linuxfoundation.org/openjs-world/
        • CFP: https://events.linuxfoundation.org/openjs-world/program/cfp/
2. PR: #4335 Make 'npm install --loglevel warn' Output Quieter - @DabeDotCom

• @ruyadorno
  • want to have no output at the end of install
• @lukekarrys
  • have been working on this
  • seems like a case by case for specific output

3. PR: #516 RFC: Deprecated packages UX revamp - @ruyadorno

• @ruyadorno
  • cleaning up output of install ever since v7
  • deprecation warnings are the last set not consolidated into a single line of output (ex. found 9 deprecated packages & need your attention)
  • npm deprecated | npm deprecations for listing current deprecation notices
• @rarkins
• @darcyclarke
  • add --no-deprecations opt-out flag
• @ljharb
  • deprecation warnings for transitive dependencies should not be bubbled up
  • npm deprecations <pkg> to see current deprecation notices for a specific package
• @ruyadorno
  • we talked about this before, to have npm deprecations work like npm ls & need --all to see everything

4. PR: #4260 feat(arborist)(reify): add an ability to add a hook - @fritzy

• @rarkins
  • whitesource has been working on a tool that validates and prevents known malicious packages from getting installed during npm install

6. Issue: #511 [RRFC] remove `npm-shrinkwrap.json` from the list of unignorable files - @ljharb
7. PR: #4227 Change the default save-prefix from ^ to none - @zkldi
8. Issue: #482 [RRFC] npm should use stderr for errors - @exx8
9. PR: #343 RFC: npm workspaces: auto switch context based on cwd - @ruyadorno
10. PR: #519 RFC: Package Distributions - @darcyclarke

• @ljharb would prefer to see the RFC tackle a more broad set of usecases for distributions/variants
• @darcyclarke the current proposal is purposely very focused on a narrow set of usecases so that we can provide an optimal experience f...
• @ruyadorno
  • this is essentially a first-step
  • this provides an initial set of distribution conditions
  • we can have future rfcs incrementing optionalDependencies / distributions