About npm package search
Search the npm registry for packages and see their latest version and description.
Choosing a package
- Check how recently it was updated and how many people use it.
- Read the licence and look at open issues.
- Prefer packages with few dependencies, because each one adds risk.
Security
Beware of look-alike package names (typosquatting). Confirm the exact name and publisher before installing.
A worked example
Searching for 'date picker' lists packages with a version number, a short description and the last publish date. A package updated last month with many weekly downloads is generally a safer pick than one abandoned for years.
Before you install
- Open the repository and read the README and open issues.
- Check the number of dependencies it brings with it.
- Look at the bundle size if it is meant for a web page.
Alternatives
If a package looks unmaintained, search for a fork or a similar library, and consider whether the browser or Node.js already provides the feature built in.
