npmpackage.info

Gathering detailed insights and metrics for registry-auth-token

Other packages similar to registry-auth-token

@types/registry-auth-token

5.0.1

Stub TypeScript definitions entry for registry-auth-token, which provides its own types definitions

registry-info

1.0.0

Get registry info (url, auth token, headers) from an arg

auth-token-registry

1.0.3

## Usage

auth-github-registry

0.1.1

`auth-github-registry` configures `yarn` and `npm` with an authentication token for the Github package registry.

Gathering detailed insights and metrics for registry-auth-token

registry-auth-token

Get the auth token set for an npm registry

5.1.0

MIT

JavaScript

10.57 kB

3,155,549,688 3.4

Installations

npm install registry-auth-token

Developer Guide

BETA

Typescript

Yes

Module System

CommonJS

Min. Node Version

>=14

Node Version

22.12.0

NPM Version

11.1.0 Score

97.7

Supply Chain

88.6

Quality

81.4

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

0

Total

33

Closed

8

Merged

25

Issues

Open

1

Total

16

Closed

15

Releases

Unable to fetch releases

Languages

JavaScript

JavaScript (100%)

Developer

rexxars

Download Statistics

Total Downloads

3,155,549,688

Last Day

803,431

Last Week

13,664,633

Last Month

59,271,013

Last Year

579,260,622

GitHub Statistics

MIT License

34 Stars

120 Commits

17 Forks

1 Watchers

2 Branches

16 Contributors

Updated on Jun 21, 2025

Bundle Size

32.18 kB

Minified

10.57 kB

Minified + Gzipped

Bundlephobia

Maintainers

View All 16 Contributors

Package Meta Information

Latest Version

5.1.0

Package Id

registry-auth-token@5.1.0

Unpacked Size

15.41 kB

Size

5.64 kB

File Count

NPM Version

11.1.0

Node Version

22.12.0

Published on

Feb 08, 2025

Total Downloads

Cumulative downloads

Total Downloads

3,155,549,688

Last Day

-16.1%

803,431

Compared to previous day

Last Week

-9.6%

13,664,633

Compared to previous week

Last Month

8.2%

59,271,013

Compared to previous month

Last Year

13.4%

579,260,622

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

@pnpm/npm-conf

Dev Dependencies

istanbul mocha require-uncached standard

registry-auth-token

Get the auth token set for an npm registry from .npmrc. Also allows fetching the configured registry URL for a given npm scope.

Installing

npm install --save registry-auth-token

Usage

Returns an object containing token and type, or undefined if no token can be found. type can be either Bearer or Basic.

1const getAuthToken = require('registry-auth-token')
2const getRegistryUrl = require('registry-auth-token/registry-url')
3
4// Get auth token and type for default `registry` set in `.npmrc`
5console.log(getAuthToken()) // {token: 'someToken', type: 'Bearer'}
6
7// Get auth token for a specific registry URL
8console.log(getAuthToken('//registry.foo.bar'))
9
10// Find the registry auth token for a given URL (with deep path):
11// If registry is at `//some.host/registry`
12// URL passed is `//some.host/registry/deep/path`
13// Will find token the closest matching path; `//some.host/registry`
14console.log(getAuthToken('//some.host/registry/deep/path', {recursive: true}))
15
16// Use the npm config that is passed in
17console.log(getAuthToken('//registry.foo.bar', {
18  npmrc: {
19    'registry': 'http://registry.foo.bar',
20    '//registry.foo.bar/:_authToken': 'qar'
21  }
22}))
23
24// Find the configured registry url for scope `@foobar`.
25// Falls back to the global registry if not defined.
26console.log(getRegistryUrl('@foobar'))
27
28// Use the npm config that is passed in
29console.log(getRegistryUrl('http://registry.foobar.eu/', {
30  'registry': 'http://registry.foobar.eu/',
31  '//registry.foobar.eu/:_authToken': 'qar'
32}))

Return value

1// If auth info can be found:
2{token: 'someToken', type: 'Bearer'}
3
4// Or:
5{token: 'someOtherToken', type: 'Basic'}
6
7// Or, if nothing is found:
8undefined

Security

Please be careful when using this. Leaking your auth token is dangerous.

License

No vulnerabilities found.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

License

Determines if the project has defined a license.

9

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

1

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Maintained

Determines if the project is "actively maintained".

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Security-Policy

Determines if the project has published a security policy.

0

Fuzzing

Determines if the project uses fuzzing.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

SAST

Determines if the project uses static code analysis.

Score

3.4

/10

Last Scanned on 2025-06-23

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More

registry-auth-token - 5.1.0 | npmpackage.info