isaacs/npm — Issue #2058: npm should not attempt to look into the registry for packages not originating from it
Author: opichals
Created: 2012-01-19 09:16:34+00:00
State: open

$ npm outdated -g

npm http GET https://registry.npmjs.org/node-inspector
npm http GET https://registry.npmjs.org/optimist
npm http 404 https://registry.npmjs.org/gdc-syslog

The gdc-syslog is a module that was installed locally with no intentions to make it public. The fact that npm is trying to lookup such packages anywhere on the internet while processing any of its commands could be seen as a privacy problem.