Repository credentials
Understand repository URLs, read/install tokens and publish tokens.
Registry URL
The registry URL identifies the npm endpoint for the repository. It is routing information, not a secret.
Read / install token
Use the read token on developer machines, CI jobs and deployment environments that only download packages.
Publish token
Use the publish token only for authorized maintainers or release automation. Never embed it in browser code, package source, screenshots, logs or committed environment files.
Was this page useful?