diff options
author | Kat Marchán <kzm@sykosomatic.org> | 2017-05-28 21:04:08 -0700 |
---|---|---|
committer | James M Snell <jasnell@gmail.com> | 2017-05-29 09:36:12 -0700 |
commit | 6083c4dc102b4da306faaf81469e33687f30daf1 (patch) | |
tree | b2d3a62f03531e9ca7c3a7eebbf562efc91b15ca /deps/npm/doc/cli/npm-publish.md | |
parent | ac2e8820c4c4188e54afa0cf0d9fea8ec823e15d (diff) | |
download | node-new-6083c4dc102b4da306faaf81469e33687f30daf1.tar.gz |
deps: upgrade npm to 5.0.0
PR-URL: https://github.com/nodejs/node/pull/13276
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Jeremiah Senkpiel <fishrock123@rocketmail.com>
Diffstat (limited to 'deps/npm/doc/cli/npm-publish.md')
-rw-r--r-- | deps/npm/doc/cli/npm-publish.md | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/deps/npm/doc/cli/npm-publish.md b/deps/npm/doc/cli/npm-publish.md index caf1fd2430..892786b61d 100644 --- a/deps/npm/doc/cli/npm-publish.md +++ b/deps/npm/doc/cli/npm-publish.md @@ -48,6 +48,10 @@ Once a package is published with a given name and version, that specific name and version combination can never be used again, even if it is removed with npm-unpublish(1). +As of `npm@5`, both a sha1sum and an integrity field with a sha512sum of the +tarball will be submitted to the registry during publication. Subsequent +installs will use the strongest supported algorithm to verify downloads. + For a "dry run" that does everything except actually publishing to the registry, see `npm-pack(1)`, which figures out the files to be included and packs them into a tarball to be uploaded to the registry. |