npmx

Why it's ranked here

The case is the gap list. Its own comparison table marks version diff, install size, install script warnings, license change warnings, module replacement suggestions, generated API docs and a 39 locale interface as things the official site does not offer. It is MIT licensed, built on Nuxt 4, and run under a written governance model with two named stewards. Accessibility is tested rather than promised: the scripts run Lighthouse audits in both dark and light mode. The honest gaps are small but real: no dependents list yet and no two-factor or account settings.

What's good

Links are the product. Every view, from a single source line to a comparison set or a changelog, lives in the address bar, so a teammate opens exactly what you saw. Security signals are stacked in one place: advisories from the OSV vulnerability database, provenance badges, deprecation notices, and a warning when a newer release drops trusted publishing. Repository stars and forks come from ten git hosts, not just GitHub. The admin helper is cautious by design: the web page can only queue a change, each change must be approved before it runs, and dependent steps are skipped if an earlier one fails.

Tradeoffs

Admin features need a separate local helper running on Node 24 or newer, reachable from the browser over localhost, so this part does not work from a phone or a locked-down laptop. The helper keeps its queue in memory and checks a single shared token. Package pages are regenerated on a five minute cache, so a release published seconds ago may not show yet. Search leans on a third-party index run by Algolia and jsDelivr rather than the registry itself. The page security policy still allows inline scripts, which the project says Nuxt hydration requires. Dependents and account settings are missing.

How to use it well

Use it at the moment you are choosing or upgrading a dependency: compare the candidates, then open the version diff and the timeline to see what actually changed, including new install scripts or license swaps. Share the resulting link in the pull request instead of a screenshot. The browser redirect extension listed in the readme makes it the default without retraining habits. Keep the official site for account security, two-factor setup, and checking who depends on a package. Run the local helper only when you need org or owner changes.

Observed

License

MIT (LICENSE, package.json)

Language and framework

TypeScript and Vue on Nuxt 4 with Nitro and UnoCSS

Interface

Hosted web app with npm-compatible URLs; optional local connector CLI npmx-connector for admin operations

Runtime requirement

Node 24 for the app; connector requires Node >=24.4.0 (cli/package.json)

Admin model

Browser queues operations, user approves, connector executes them via the local npm CLI (cli/src/server.ts)

Test surface

Vitest unit and Nuxt projects, Playwright browser tests, Lighthouse accessibility runs in dark and light mode (package.json scripts)

Localisation

Interface translated across 39 locales including RTL

Not supported

Dependents list (coming soon) and 2FA/account settings, per the project's own comparison table

Governance

Written governance model with two named project stewards and an AI contribution policy