summaryrefslogtreecommitdiff
path: root/deps/npm/doc/cli/npm-publish.md
diff options
context:
space:
mode:
authorKat Marchán <kzm@sykosomatic.org>2017-05-28 21:04:08 -0700
committerJames M Snell <jasnell@gmail.com>2017-05-29 09:36:12 -0700
commit6083c4dc102b4da306faaf81469e33687f30daf1 (patch)
treeb2d3a62f03531e9ca7c3a7eebbf562efc91b15ca /deps/npm/doc/cli/npm-publish.md
parentac2e8820c4c4188e54afa0cf0d9fea8ec823e15d (diff)
downloadnode-new-6083c4dc102b4da306faaf81469e33687f30daf1.tar.gz
deps: upgrade npm to 5.0.0
PR-URL: https://github.com/nodejs/node/pull/13276 Reviewed-By: James M Snell <jasnell@gmail.com> Reviewed-By: Colin Ihrig <cjihrig@gmail.com> Reviewed-By: Jeremiah Senkpiel <fishrock123@rocketmail.com>
Diffstat (limited to 'deps/npm/doc/cli/npm-publish.md')
-rw-r--r--deps/npm/doc/cli/npm-publish.md4
1 files changed, 4 insertions, 0 deletions
diff --git a/deps/npm/doc/cli/npm-publish.md b/deps/npm/doc/cli/npm-publish.md
index caf1fd2430..892786b61d 100644
--- a/deps/npm/doc/cli/npm-publish.md
+++ b/deps/npm/doc/cli/npm-publish.md
@@ -48,6 +48,10 @@ Once a package is published with a given name and version, that
specific name and version combination can never be used again, even if
it is removed with npm-unpublish(1).
+As of `npm@5`, both a sha1sum and an integrity field with a sha512sum of the
+tarball will be submitted to the registry during publication. Subsequent
+installs will use the strongest supported algorithm to verify downloads.
+
For a "dry run" that does everything except actually publishing to the
registry, see `npm-pack(1)`, which figures out the files to be included and
packs them into a tarball to be uploaded to the registry.