Database

Bundling JavaScript/TypeScript libraries for distribution using tsup, unbuild, and Rollup

Security auditing npm dependencies for vulnerabilities, license compliance, and supply chain risks

Lock file strategies for deterministic installs across npm, pnpm, and Yarn

Publishing packages to the npm registry with proper configuration, access control, and release automation

pnpm workspace management for monorepos with content-addressable storage and strict dependency isolation

Setting up and using private npm registries with Verdaccio, GitHub Packages, and GitLab Package Registry

Semantic versioning (SemVer) conventions, version ranges, and strategies for managing breaking changes

Yarn Berry (v2+) with Plug'n'Play, zero-installs, constraints, and workspace management