Private npm registry setup

A private npm registry setup has three moving parts: the registry URL, the token, and the package scope.

Local setup

npm config set @acme:registry https://rvnsta.sh/n/npm/x/acme/frontend/
npm config set //rvnsta.sh/n/npm/x/acme/frontend/:_authToken "${RAVENSTASH_TOKEN}"

Use the same .npmrc shape for npm-compatible clients.

CI setup

Store RAVENSTASH_TOKEN in your CI secret manager. Generate .npmrc during the job so tokens do not appear in the repository.

cat > .npmrc <<'EOF'
@acme:registry=https://rvnsta.sh/n/npm/x/acme/frontend/
//rvnsta.sh/n/npm/x/acme/frontend/:_authToken=${RAVENSTASH_TOKEN}
EOF
npm publish --registry https://push.rvnsta.sh/n/npm/x/acme/frontend

Current boundaries

Available today: private npm publishing, package data, version data, tarball downloads, and registry ping support. Manual dist-tag edits are coming later.