Unverified50% confidenceFactExact time
After the left-pad incident, npm was forced to restore the package and changed its unpublish policy to restrict the deletion of published versions after 24 hours.
1
Sources
50%
Confidence
Long-term
Relevance
10/19/2026
First Seen
Sources
Related Entities
Related Claims
Unverifiedleft-pad事件促使npm修改unpublish策略——发布超过72小时或有其他包依赖的包不能再被随意删除74% similarUnverifiedIn the 2016 left-pad incident, an npm package of only 11 lines of code was unpublished by its author, causing the builds of mainstream projects such as React and Babel to break for several hours, and directly driving npm's registry immutability policy.74% similarVerifiedIn the left-pad incident of 2016, an npm package of only 11 lines of code was withdrawn by its author, causing the build pipelines of mainstream projects such as React and Babel to be disrupted for several hours58% similarUnverifiedUsing npm install --ignore-scripts can prevent scripts such as postinstall from executing automatically during the installation phase.58% similarUnverifiedPi's old npm package was hosted under the author's personal account and has been officially marked as deprecated; the new package name prefix has been changed to the company name.57% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1071516API
curl https://kongchang.com/api/v1/knowledge/claims/1071516MCP
get_claim(id=1071516)