
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Download an npm registry package tar file directly.
nrd is short for npm registry download. It is also for nerds. nrd is
useful for easily inspecting source code of modules and creating project
scaffolds. Instead of creating a repo that has a template folder inside of it
and copying files over, a project can be versioned, and directly downloaded from
npm into a project without dependency resolution issues. For example:
# Downloads my scaffold project from npm and renames it to `myapp`
my-cli-using-nrd create myapp
# Other examples
marko create myapp
create-react-app myapp
ember new myapp
ng new myapp
npm install nrd --save
nrd also comes packaged with a command line utility enabling you to download
a package from npm to any specific directory from the command line. You
obviously need it. You can install nrd globally with:
npm install nrd -g
Download a package to the current directory and decompress the tar:
const nrd = require('nrd');
nrd.download('express');
Download a package to a specific directory and decompress the tar:
const nrd = require('nrd');
nrd.download('express', {
dir: '/Users/me/Desktop'
});
Download a specific version of a package:
const nrd = require('nrd');
nrd.download('express', {
dir: '/Users/me/Desktop',
version: "4.13.1"
});
Available options:
const nrd = require('nrd');
nrd.download('express', {
...
});
latest)true)nrd comes packaged with a fantastic command line utility. Trust me, I
created it.
Download a package to the current directory and decompress the tar:
nrd express
Download a package to a specific directory and decompress the tar:
nrd express --dir /Users/me/Desktop
Running nrd --help will give you all of the information you need!
[master] $ nrd --help
Usage: nrd [options]
Examples:
Download an npm module to a specific directory:
nrd express --dir /Users/me/Desktop
Download a module from npm using a specific version:
nrd express --version 4.14.1
Download a module from npm using a specific tag:
nrd express --tag beta
Options:
--help Show this help message [string]
--dir -d Directory to download the module into (defaults to current directory) [string]
--tag -t A version tag to download (defaults to latest) [string]
--version -v The version to download from npm [string]
--untar -u Whether the registry file should be untarred or not (defaults to true) [boolean]
--registry -r Change the remote npm registry to use (defaults to https://registry.npm.org) [string]
--module -m * npm module name [string]
FAQs
Download directly from the npm registry without using npm
We found that nrd demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.