Linux workstation

Debian 12 (Bookworm) native package

npm

package manager for Node.js

Packages / Debian 12 (Bookworm) / web / npm

Package: npm (9.2.0~ds1-1)

Maintainers:

Debian Javascript Maintainers

External Resources:

Homepage: [docs.npmjs.com]

package manager for Node.js

Other Packages Related to npm:

  • dep: [ca-certificates]

    Common CA certificates

  • dep: [node-abbrev]

    Get unique abbreviations for a set of strings - Node.js module

  • dep: [node-agent-base]

    Turn a function into an http.Agent instance

  • dep: [node-aproba]

    light-weight argument validator

  • dep: [node-archy]

    Pretty-print nested hierarchies module for Node.js

  • dep: [node-base64-js]

    Base64 encoding/decoding in pure JS

  • dep: [node-binary-extensions]

    List of binary file extensions

  • dep: [node-cacache] (>= 17)

    fast, fault-tolerant, disk-based, data-agnostic, content-addressable cache

  • dep: [node-chalk] (>= 5.1.2-2~)

    Terminal string styling for Node.js

  • dep: [node-chownr]

    like chown -R

  • dep: [node-ci-info]

    Get details about the current Continuous Integration environment

  • dep: node-cli-table3

    Package not available

  • dep: [node-colors]

    Get color and style in your node.js console

  • dep: [node-columnify]

    Render data in text columns with in-column text-wrap

  • dep: node-cssesc

    Package not available

  • dep: [node-debug]

    small debugging utility for Node.js

  • dep: [node-depd]

    mark a function or property as deprecated - Node.js module

  • dep: [node-diff]

    javascript text differencing implementation

  • dep: node-emoji-regex

    Package not available

  • dep: [node-encoding]

    Convert encodings, uses iconv by default and fallbacks to iconv-lite if needed

  • dep: [node-events]

    Node.js events module to embed by web packers

  • dep: [node-glob]

    glob functionality for Node.js

  • dep: [node-got]

    Simplified HTTP requests

  • dep: [node-graceful-fs]

    drop-in replacement improving the Node.js fs module

  • dep: [node-gyp]

    Native addon build tool for Node.js

  • dep: [node-hosted-git-info] (>= 6)

    Provides metadata from Github, Bitbucket and Gitlab

  • dep: node-http-proxy-agent

    Package not available

  • dep: [node-https-proxy-agent]

    HTTP(s) proxy http.Agent implementation for HTTPS

  • dep: [node-ieee754]

    Node.js module to read or write IEEE754 floating point numbers

  • dep: [node-ini]

    ini format parser and serializer for Node.js

  • dep: [node-ip]

    IP address utilities for node.js

  • dep: [node-ip-regex]

    Regular expression for matching IP addresses

  • dep: [node-json-parse-better-errors]

    JSON.parse() with context information on error

  • dep: [node-jsonparse]

    Pure javascript JSON streaming parser for node.js

  • dep: [node-lru-cache]

    least-recently-used cache object for Node.js

  • dep: [node-minimatch]

    Convert glob expressions into RegExp objects for Node.js

  • dep: [node-minipass]

    Minimal implementation of a PassThrough for Node.js

  • dep: [node-mkdirp]

    Recursively create directories - Node.js module

  • dep: [node-ms]

    milliseconds conversion utility - Node.js module

  • dep: [node-negotiator]

    HTTP content negotiator for Node.js

  • dep: [node-nopt]

    Command-line option parser for Node.js

  • dep: [node-normalize-package-data]

    Normalizes package metadata - Node.js module

  • dep: [node-npm-bundled]

    Parses info on bundled dependencies

  • dep: node-npm-normalize-package-bin

    Package not available

  • dep: [node-npm-package-arg] (>= 10)

    Parse the things that can be arguments to npm install

  • dep: [node-npmlog]

    Logger with custom levels and colored output for Node.js

  • dep: [node-once]

    Run a function only once with this module for Node.js

  • dep: [node-p-map]

    Map over promises concurrently

  • dep: node-postcss-selector-parser

    Package not available

  • dep: [node-promise-retry]

    Retries a function that returns a promise

  • dep: [node-promzard]

    Promzard provides a prompting json wizard

  • dep: [node-read]

    Read user input from stdin module for Node.js

  • dep: [node-read-package-json]

    Read package.json for npm module for Node.js

  • dep: [node-rimraf]

    Deep deletion (like rm -rf) module for Node.js

  • dep: [node-semver]

    Semantic Versioning for Node.js

  • dep: [node-ssri]

    Utility for parsing, serializing, generating and verifying ssri metadata

  • dep: [node-string-width]

    Get the visual width of a string

  • dep: [node-strip-ansi]

    Strip ANSI escape codes

  • dep: [node-tar]

    read and write portable tar archives module for Node.js

  • dep: [node-text-table]

    borderless text tables with alignment

  • dep: [node-validate-npm-package-license]

    Tells if a string is a valid npm package license string

  • dep: [node-validate-npm-package-name]

    Checks if a string is a valid npm package name

  • dep: [node-which]

    Cross-platform 'which' module for Node.js

  • dep: [node-wrappy]

    Callback wrapping utility

  • dep: [node-write-file-atomic]

    Write files in an atomic fashion w/configurable ownership

  • dep: [node-yallist]

    Double linked list implementation for Node.js

  • dep: [nodejs] [any]

    evented I/O for V8 javascript - runtime executable

  • rec: [git]

    fast, scalable, distributed revision control system

  • rec: [node-tap]

    Test-Anything-Protocol module for Node.js

  • sug: [node-opener]

    Opens stuff, like webpages and files and executables

Download npm

ArchitecturePackage SizeInstalled SizeFiles
all653 KiB2.9 MiB[list of files]

Chemins de fichiers du paquet (0)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

No package-associated file paths were observed for the displayed build metadata.

Field source: Debian 12 (Bookworm) main arm64 revision bookworm-main-arm64:2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00

Utiliser ce paquet

OpenFactory peut démarrer ce système d'exploitation dans une machine virtuelle du navigateur, ou lancer une construction qui inclut le nom natif du paquet de cet enregistrement.

Versions, suites et dépôts

Chaque ligne est une métadonnée d'index pour une version, une architecture, une suite et un dépôt. Noms, URL et tailles viennent de la source ; un lien est un emplacement de récupération mutable, pas une redistribution OpenFactory.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
9.2.0~ds1-1bookworm / mainallDebian 12 · main · arm64653 KiB2.9 MiBpool/main/n/npm/npm_9.2.0~ds1-1_all.deb
9.2.0~ds1-1bookworm / mainallDebian 12 · main · amd64653 KiB2.9 MiBpool/main/n/npm/npm_9.2.0~ds1-1_all.deb

Field source: Debian 12 (Bookworm) main arm64 revision bookworm-main-arm64:2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00

Empreintes et dates d'observation

For an APT source, signature verification authenticates the repository metadata chain and the Packages index containing this source-reported artifact digest. It does not certify package safety.

9.2.0~ds1-1 / allObserved Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: 1e31d6a0bd0bef04c2f1748ea776cd4e1f2c266ecf177c9539a8015e04d3a068

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s %s\n' '1e31d6a0bd0bef04c2f1748ea776cd4e1f2c266ecf177c9539a8015e04d3a068' 'npm_9.2.0~ds1-1_all.deb' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Debian 12 (Bookworm) main arm64 revision bookworm-main-arm64:2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00

9.2.0~ds1-1 / allObserved Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: 1e31d6a0bd0bef04c2f1748ea776cd4e1f2c266ecf177c9539a8015e04d3a068

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s %s\n' '1e31d6a0bd0bef04c2f1748ea776cd4e1f2c266ecf177c9539a8015e04d3a068' 'npm_9.2.0~ds1-1_all.deb' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Debian 12 (Bookworm) main amd64 revision bookworm-main-amd64:9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5

Complétude de la fiche

The completeness score measures metadata coverage, not software quality, security, compatibility, or suitability.

Summary and description
25/25
Artifact path and source digest
25/25
Dependency metadata
15/15
Package-file index
0/15
Homepage
5/5
License text
0/5
Source package or maintainer
10/10

Recorded total: 80/100

Field source: Debian 12 (Bookworm) main amd64 revision bookworm-main-amd64:9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5, Debian 12 (Bookworm) main arm64 revision bookworm-main-arm64:2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00. The cross-OS mapping is catalog-derived from the source-reported homepage; it does not establish authorship or publisher identity

Sources et provenance

Field-source links above resolve here. Each source entry names the metadata publisher, trust tier, exact snapshot revision, signature result, and observation time; catalog-derived mappings are labeled separately.

  • Authoritative source; repository metadata signature verified, revision bookworm-main-amd64:9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed-object SHA-256
    77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Signed Release → package-index hash linkage

    Path: main/binary-amd64/Packages.xz
    Expected SHA-256: 9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
    Observed SHA-256: 9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
    Result: match verified

  • Authoritative source; repository metadata signature verified, revision bookworm-main-arm64:2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed-object SHA-256
    77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Signed Release → package-index hash linkage

    Path: main/binary-arm64/Packages.xz
    Expected SHA-256: 2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
    Observed SHA-256: 2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
    Result: match verified