GitHub to acquire NPM JavaScript package registry

Microsoft-owned GitHub has signed an agreement to purchase JavaScript package registry provider NPM, with plans to integrate the two platforms and move the private NPM packages of paying NPM customers to the GitHub Packages registry. NPM will focus exclusively on its public registry.

The deal was announced March 16. With the integration, GitHub wants to improve the security of the open source software supply chain and enable users to trace a change from a GitHub pull request to the NPM package version that fixed it. The public NPM registry shall remain free.

The NPM registry has been home to more than 1.3 million packages with 75 billion downloads per month. For paying customers who use NPM Pro, NPM Teams, and NPM Enterprise to host private registries, GitHub will continue to support them. GitHub also is investing in GitHub Packages as a multi-vendor packages registry integrated with GitHub. Later this year, NPM customers will be able to move private NPM packages to GitHub Packages.

To read this article in full, please click here