Manage npm

[veit]

1. npm init
2. Lock dependencies: .npmrc

   $ npm config set save=true
   $ npm config set save-exact=true
   

3. Secure your projects and tokens
   Don’t store the token directly in .npmrc but in .profile and then link to it:

   //registry.npmjs.org/:_authToken=${NPM_TOKEN}
   

   See Deploying with npm private modules
4. Check for outdated dependencies

   $ npm outdated
   

   See also Greenkeeper
5. preinstall, postinstall and test scripts
6. NODE_ENV environment variables

   console.log("Node environment :"  + process.env.NODE_ENV);
   

   See also:
   • https://github.com/indexzero/nconf
   • https://github.com/motdotla/dotenv
7. Avoid devDependencies in production
   To install production dependencies, run

   $ npm install --production
   

   or

   $ NODE_ENV=production npm install
   

   See also Specifying dependencies and devDependencies in a package.json file