npm ✓

@npmjs · joined 02 Jun 2011

The package manager for JavaScript Problems? Visit https://t.co/WNuo1MMbMP or https://t.co/i3MoAdr5p5

147 560Followers

142Following

4 711Posts total

404KViews on collected posts

Against accounts of the same size

7 posts from the last 90 days, next to the 100K–1M follower range. shown widely, but few of those viewers react.

Median views5 960this account6 178median for 100K–1M

Reach, %4.04%this account2.63%median for 100K–1M

Engagement, %0.80%this account1.40%median for 100K–1M

Metric	This account	Median for 100K–1M	Ratio
Median views per post	5 960	6 178	0.96×
Reach (views ÷ followers)	4.04%	2.63%	1.54×
Engagement rate	0.80%	1.40%	0.57×

Others in this range → Compare with another account → How these benchmarks are built →

Growth & engagement

How the posts we collected actually performed: views and reaction rate post by post, what the audience did with them, and where the follower count goes.

Views per post

24.3K20 May

267.9K

12.2K

14.8K8 Jul

7.7K29 Jul

66.9K4 Aug

1.5K

6535 Aug

6K13 Aug

Last 10 collected posts, oldest on the left. The scale is logarithmic: one post can outrun the rest a hundred times over.

Engagement rate per post

0.55%20 May

0.68%

1.63%

0.93%8 Jul

0.52%29 Jul

1.00%4 Aug

0.80%

0.69%

1.23%5 Aug

0.45%13 Aug

Reactions — likes, reposts, replies and quotes — divided by views. Median for 100K–1M accounts is 1.40%.

What the audience does

Likes68.6%2 560 in total

Reposts9.2%345 in total

Replies2.4%90 in total

Quotes1.8%68 in total

Bookmarks17.9%667 in total

Share of every reaction we collected for this account. Replies mean argument, reposts mean endorsement, bookmarks mean the post was worth keeping.

The follower curve appears once this account has two daily snapshots — we take one a day, and this one is on its first.

Latest posts

npm Granular Access Tokens that bypass 2FA can no longer manage your account, org, or packages—those actions now require an interactive 2FA challenge, closing a major credential-based attack surface. https://t.co/c4P47SKYfr 6K views · 21 likes · 4 reposts · 1 replies 13 Aug 2026 @npmjs Trusted publishing is basically giving your keys to a Microsoft employee 653 views · 8 likes · 0 reposts · 0 replies 05 Aug 2026 @npmjs that might be the biggest non-solution you could’ve possibly attempted to “solve” this 2K views · 14 likes · 0 reposts · 0 replies 04 Aug 2026 @npmjs @github You guys can’t even run a simple check on the package to see any discrepancies, especially in the post install 😂 1.5K views · 12 likes · 0 reposts · 0 replies 04 Aug 2026 npm is rotating write-scoped npm Granular Access Tokens that bypass 2FA as a precaution following a now-contained security incident. This doesn't affect GitHub personal access tokens. Maintainers should upgrade the npm CLI to v12+ and consider Trusted Publishing. 66.9K views · 518 likes · 122 reposts · 20 replies 04 Aug 2026 Strengthening npm supply-chain security: packages are now scanned for malware at publish time, before they can be installed. We're also introducing disclosure for legitimate dual-use tools so they aren't blocked by default. https://t.co/GAN3Qm05NA 7.7K views · 29 likes · 3 reposts · 5 replies 29 Jul 2026 npm v12 is here. npm install now blocks lifecycle scripts, git, and remote-URL dependencies by default — a more secure baseline out of the box. We're also starting to phase out npm 2FA-bypass tokens for account changes and direct publishing. Details 👇 https://t.co/HI4tSNOO3l 14.8K views · 114 likes · 19 reposts · 2 replies 08 Jul 2026 @npmjs Crazy how y’all put in the least amount of effort into this https://t.co/s3WmXraYcK 12.2K views · 193 likes · 2 reposts · 2 replies 20 May 2026 1/ To prevent supply chain attacks following the pattern of Mini Shai Hulud, we invalidated npm granular access tokens with write access that bypass 2FA. Update the stored token and rerun the workflow for your automations. 267.9K views · 1.5K likes · 190 reposts · 54 replies 20 May 2026 2/ Use npm Trusted Publishing to reduce reliance on such tokens. https://t.co/iZf76MeJAU 24.3K views · 123 likes · 5 reposts · 6 replies 20 May 2026