Post

Fun fact about the NPM replication feed. If you just follow the feed to get updates for ever package, you will miss packages because they retroactively insert changes in the *past* of the feed.

Jordan Harband

@jordan.har.band

oof. is there any alternative that doesn’t require rescans?

Evert Pot

@evertpot.com

Not that I know of. Maybe we should consider making a downstream replication feed at some point, although we filter out known-malware. cc @darcyclarke.me

8/10/26, 2:00 am0 reposts2 likes

Darcy Clarke

@darcyclarke.me

We'll happily provide a better feed for anyone that wants to pay for it 😉