npm package discovery and stats viewer.

Discover Tips

  • General search

    [free text search, go nuts!]

  • Package details

    pkg:[package-name]

  • User packages

    @[username]

Sponsor

Optimize Toolset

I’ve always been into building performant and accessible sites, but lately I’ve been taking it extremely seriously. So much so that I’ve been building a tool to help me optimize and monitor the sites that I build to make sure that I’m making an attempt to offer the best experience to those who visit them. If you’re into performant, accessible and SEO friendly sites, you might like it too! You can check it out at Optimize Toolset.

About

Hi, 👋, I’m Ryan Hefner  and I built this site for me, and you! The goal of this site was to provide an easy way for me to check the stats on my npm packages, both for prioritizing issues and updates, and to give me a little kick in the pants to keep up on stuff.

As I was building it, I realized that I was actually using the tool to build the tool, and figured I might as well put this out there and hopefully others will find it to be a fast and useful way to search and browse npm packages as I have.

If you’re interested in other things I’m working on, follow me on Twitter or check out the open source projects I’ve been publishing on GitHub.

I am also working on a Twitter bot for this site to tweet the most popular, newest, random packages from npm. Please follow that account now and it will start sending out packages soon–ish.

Open Software & Tools

This site wouldn’t be possible without the immense generosity and tireless efforts from the people who make contributions to the world and share their work via open source initiatives. Thank you 🙏

© 2026 – Pkg Stats / Ryan Hefner

@simptel/azure-devops-npm-auth

v1.1.0

Published

Local development Microsoft Entra ID auth for Azure DevOps npm feeds and replaces Personal Access Tokens.

Vulnerabilities

Powered byPowered by Snyk
  • 0High
  • 0Medium
  • 0Low

Links

Git

Maintainers

izahirclemenciaizahirclemencia

Keywords

Readme

azure-devops-npm-auth

Authenticate npm with Azure DevOps Artifacts using Microsoft Entra ID. Replaces Personal Access Tokens with short-lived tokens that refresh automatically.

Install

npm install -g @simptel/azure-devops-npm-auth

Requires Node.js 22.9.0+.

Usage

First run (in a project with an Azure DevOps .npmrc):

azure-devops-npm-auth --tenant-id <tenant-id> --client-id <client-id>

Prints a device code, opens a browser to sign in, stores the session in your OS keychain, and writes a token to the npm user config file ($npm_config_userconfig if set, otherwise ~/.npmrc).

After that, just run:

azure-devops-npm-auth

It silently refreshes the token from the cached session. Safe to run before every npm install.

You can also set AZDO_TENANT_ID and AZDO_CLIENT_ID instead of passing flags. Run azure-devops-npm-auth --help for all options.

Features

  • No PATs — uses Entra ID device code flow
  • Tokens auto-refresh (~1h lifetime)
  • Multi-registry support
  • Credentials stored in OS keychain (Keychain / DPAPI / libsecret)

Setup

An admin registers an Entra app once:

  1. App registrations → New registration — single tenant, no redirect URI
  2. Authentication → enable Allow public client flows
  3. API permissions → Add → Azure DevOps → Delegated → vso.packaging (add vso.packaging_write for publishing)
  4. Grant admin consent
  5. Share the Application (client) ID and Directory (tenant) ID with developers

License

MIT