github, the Microsoft-owned developer repository, announcement a few days ago that you have made the purchase from the popular JavaScript package manager "NPM", this transaction was carried out by signing a purchase agreement for an undisclosed amount.
GitHub said developers using public registry for npm can continue to use it for free. The structure has decided to focus on three areas once the purchase transaction is completed.
“Npm is an essential part of the JavaScript world. The work of the npm team over the past 10 years and the contributions of hundreds of thousands of open source developers and maintainers have enabled npm to host more than 1.3 million packages with 75 billion downloads per month.
Together, they have helped JavaScript become the world's largest developer ecosystem.
At GitHub, we are honored to be part of the next chapter in the npm story and to help npm continue to evolve to meet the needs of the rapidly growing JavaScript community.
Among the areas that the GitHub team will focus on to work with NPM are:
Infrastructure and registration platform
“The JavaScript ecosystem is huge and growing rapidly. You need a rock solid record. We will make the necessary investments to ensure that npm is fast, reliable and scalable. "
Improve basic experience:
“We will work to improve the day-to-day experience for developers and maintainers, and we will support the excellent work already started on the CLI npm v7, which will continue to be free and open source. Some of the most important features we are interested in are workspaces and improvements in multi-factor authentication and the publishing experience.
Community commitment:
"We will actively engage with the JavaScript community to get their ideas and help define the future of npm."
In the future, the company plans to integrate GitHub and npm to further improve security and allow developers to closely monitor npm packages from their pull requests.
For paying customers from npm Pro, Teams and Enterprise, GitHub plans to allow these users to move their private packages from npm to GitHub packages.
Nat Friedman, CEO of Github, who made the announcement in a blog post, wrote that npm's place in the open source community and its extensive package registry JavaScript was a key reason for the purchase.
Microsoft is just one of many companies technological who have increased their focus on open source in recent years, following the belief that by resorting to an open source strategy, they will attract more developers.
That belief seems to match some recent statistics. A 2019 study sponsored by Red Hat said that 69% of IT leaders believed open source was very important to businesses and 68% said they had increased their use of open source in the 12 months prior to the study.
Friedman went on to explain that his three most important goals, once the deal is finalized, will be to invest in the registry infrastructure and platform, improve the core experience, and engage with the community.
“In the long term, we will integrate GitHub and npm to improve the security of the open source software supply chain and allow you to track a change from a GitHub pull request to the version of the npm package that fixed it.
Existing paying customers already using npm Pro, Teams, and Enterprise to host private records they will not experience changes in the service.
Friedman also noted that the company will invest heavily in GitHub packages. as a multi-language package registry fully integrated with GitHub and later this year they will allow npm paying customers to move their private npm packages to GitHub packages.
Source: https://github.blog