Assess which pull requests should receive attention next using the established scoring lenses and lane assignments.
Snapshot 2026-10-19T17:27:53.036Z ·
schema snapshot-v2 ·
score scoring-v1
Human review required: lanes prioritize attention; they do not automate merge or closure decisions. Close-candidate and value-assessment queues always require maintainer confirmation.
Small, ready changes with strong quick-win scores.
| Pull request | Title | Author | Quick win | Complexity | Age | Confidence | Signals |
|---|---|---|---|---|---|---|---|
| npm/hosted-git-info#345 | feat: parse git+https sourcehut urls | ljharb | 95 | 0 | 5d | medium | no-closing-issue |
| npm/ini#316 | docs: correct serialization and escaping examples | xiehuanyi | 91 | 0 | 12d | medium | no-closing-issue |
| npm/npm-package-arg#235 | fix: skip hosted parsing for ordinary registry specifiers | jovial-liu | 90 | 0 | 11d | medium | — |
| npm/cli#10109 | docs: note that `npm install -g` does not create a local node_modules | ump45nose | 90 | 2 | 9d | medium | no-closing-issue |
| npm/node-semver#928 | docs: clarify prerelease identifier base | fallintoplace | 90 | 4 | 1d | medium | no-closing-issue |
| npm/promise-spawn#170 | fix: recognize forward-slash Windows cmd shell paths | jpdefo | 90 | 0 | 6d | medium | no-closing-issue |
| npm/cli#10033 | chore: prefix Node staging PR titles | reggi | 87 | 6 | 25d | medium | no-closing-issue |
| npm/rfcs#547 | add "obey user specifier" RFC | ljharb | 87 | 5 | 1691d | medium | no-closing-issue |
| npm/cli#10108 | docs: propose Markdown conventions in CONTRIBUTING | ump45nose | 87 | 9 | 9d | medium | no-closing-issue |
| npm/rfcs#648 | RFC: [improvement] reenable npm cli api access | ganeshkbhat | 86 | 2 | 1454d | medium | no-closing-issue |
| npm/cli#10128 | fix(arborist): skip bundle checks without an applicable override | jeffwidman | 85 | 26 | 5d | medium | no-closing-issue, generated-content-disclosed |
| npm/cli#10115 | fix: accept omitted unresolved optional packages in npm ci | mvanhorn | 84 | 25 | 7d | high | — |
| npm/cli#10107 | docs(npmrc): describe how credentials are matched to the registry URL | ump45nose | 84 | 16 | 9d | medium | — |
| npm/cli#10132 | fix(arborist): skip normalization for canonical ASCII map keys | jeffwidman | 84 | 28 | 4d | medium | no-closing-issue |
| npm/cli#10047 | docs: clarify os/cpu/libc accept string or array | SatvikMishra08 | 84 | 16 | 22d | medium | — |
| npm/ini#312 | fix: preserve scalar keys ending in "[]" across stringify/parse | spokodev | 84 | 10 | 47d | medium | no-closing-issue |
| npm/cli#10127 | fix(arborist): use a set for bundled-dependency traversal | jeffwidman | 83 | 30 | 5d | medium | no-closing-issue, generated-content-disclosed |
| npm/cli#10075 | fix(arborist): guard explicit request edges that have no matching edge | rubenmarcus | 83 | 24 | 15d | medium | — |
| npm/cli#9883 | docs: fix grammar and missing brackets in document | minirang | 83 | 19 | 64d | medium | no-closing-issue |
| npm/cli#10106 | docs: define "packument" in the registry documentation | ump45nose | 83 | 18 | 9d | medium | no-closing-issue |
| npm/cli#10131 | fix(arborist): skip named-edge refresh work for empty leaves | jeffwidman | 82 | 32 | 4d | medium | no-closing-issue |
| npm/cli#9732 | docs: add 'download' to list of valid onFail values in devEngines | Nabeel-akk | 82 | 0 | 103d | medium | weight-sensitive |
| npm/cli#9774 | fix(config): redact proxy environment credentials | tianrking | 82 | 13 | 95d | medium | weight-sensitive |
| npm/cli#9764 | docs: clarify devDependencies installation for git protocol | var12958 | 82 | 11 | 97d | medium | no-closing-issue |
| npm/cli#9986 | fix(arborist): keep linked optional peer links that resolve to kept targets | manzoorwanijk | 81 | 36 | 34d | high | — |
| npm/node-semver#923 | fix: 1.3–1.6x faster satisfies() with includePrerelease by not re-parsing comparator versions | deadstrobe5 | 81 | 7 | 4d | medium | no-closing-issue |
| npm/cli#9817 | docs: document the allowScripts field in package.json | Nohgh | 81 | 15 | 82d | medium | no-closing-issue |
| npm/cli#9705 | fix(search): strip control characters from registry version field | ubeddulla | 80 | 29 | 111d | medium | no-closing-issue |
| npm/rfcs#776 | RFC: No implicit tagging for non-latest release versions | kytta | 80 | 15 | 878d | medium | no-closing-issue |
| npm/cli#10001 | fix: handle zero matches in unpublish | 1x2x3x4 | 80 | 21 | 29d | medium | no-closing-issue |
High issue impact that merits deliberate review despite higher complexity.
| Pull request | Title | Author | Issue impact | Complexity | Age | Confidence | Signals |
|---|---|---|---|---|---|---|---|
| npm/ini#314 | fix: decode escaped dots in nested section names | Imkkey | 100 | 80 | 18d | medium | — |
| npm/documentation#1932 | [Design]: Update Search Bar Styling | kenshanta | 93 | 70 | 196d | medium | — |
| npm/cli#10061 | fix: respect gypfile:false when detecting install scripts | JamieMagee | 84 | 97 | 18d | high | — |
| npm/make-fetch-happen#380 | fix: notify onRetry only when another attempt starts | jpdefo | 73 | 100 | 6d | medium | — |
| npm/rfcs#912 | RFC: Content-Addressable Store | manzoorwanijk | 70 | 93 | 100d | high | generated-content-disclosed |
The normal review queue, ordered by review priority.
| Pull request | Title | Author | Review priority | Complexity | Age | Confidence | Signals |
|---|---|---|---|---|---|---|---|
| npm/cli#9990 | fix(arborist): run workspace lifecycle scripts once under linked strategy | manzoorwanijk | 65 | 78 | 34d | high | — |
| npm/cli#10008 | fix(patch): reject binary file changes in npm patch commit | manzoorwanijk | 65 | 70 | 28d | medium | no-closing-issue |
| npm/cli#9989 | fix(arborist): keep locked versions when extension rules change | manzoorwanijk | 63 | 73 | 34d | high | — |
| npm/cli#10007 | feat(patch): support npm: registry aliases in npm patch | manzoorwanijk | 62 | 84 | 28d | medium | no-closing-issue |
| npm/cli#10068 | fix: skip disconnected orphans in install script checks | JamieMagee | 62 | 97 | 17d | high | — |
| npm/cli#9983 | fix(arborist): validate linked store deps against the store package | manzoorwanijk | 61 | 82 | 34d | high | — |
| npm/cli#9988 | fix: print ERESOLVE for dense dependents graphs instead of exiting silently | manzoorwanijk | 61 | 83 | 34d | high | — |
| npm/cli#10136 | fix(publish): report publishConfig.tag in publish and stage notices | ljharb | 61 | 62 | 4d | medium | no-closing-issue |
| npm/cli#10135 | fix(libnpmexec): install npx cache despite dryRun or packageLockOnly | ljharb | 60 | 68 | 4d | medium | no-closing-issue |
| npm/cli#9944 | fix(libnpmexec): honor min-release-age-exclude when resolving specs | MrRio | 59 | 45 | 46d | medium | — |
| npm/node-semver#925 | fix: backport v7 range parsing performance improvement to v6 | reggi | 59 | 71 | 3d | medium | no-closing-issue |
| npm/cli#10049 | feat: add auto-install-peers to opt out of auto-installing peer dependencies | manzoorwanijk | 58 | 98 | 20d | medium | no-closing-issue |
| npm/node-semver#927 | fix: backport v7 range parsing performance improvement to v5 | reggi | 58 | 75 | 3d | medium | no-closing-issue |
| npm/rfcs#911 | RFC: Global Virtual Store for Linked Installs | manzoorwanijk | 57 | 68 | 100d | medium | no-closing-issue, generated-content-disclosed |
| npm/promise-spawn#163 | fix: resolve the shell from a trusted PATH | JamieMagee | 56 | 100 | 109d | medium | no-closing-issue |
| npm/cli#9971 | fix(arborist): re-resolve stale git refs and commit SHAs | rijildaniel | 53 | 64 | 35d | high | — |
| npm/documentation#2002 | deps: remove postcss-import and postcss-preset-env | reggi | 53 | 96 | 101d | medium | no-closing-issue |
| npm/node-semver#924 | chore: backport v7 range parsing coverage to v6 | reggi | 53 | 95 | 3d | medium | no-closing-issue |
| npm/node-semver#926 | chore: backport v7 range parsing coverage to v5 | reggi | 53 | 95 | 3d | medium | no-closing-issue |
| npm/node-semver#918 | fix: improve range parsing performance | reggi | 52 | 100 | 11d | medium | no-closing-issue |
| npm/cli#9741 | fix(diff): strip control chars from generated diff headers | ubeddulla | 51 | 77 | 101d | medium | no-closing-issue, weight-sensitive |
| npm/node-semver#914 | fix: reject empty range intersections with wildcards | FanWu-ai | 51 | 32 | 14d | medium | — |
| npm/cli#10067 | fix(arborist): prune shadowed hoisted deps, defer workspace deps | Saibamen | 50 | 90 | 17d | high | — |
| npm/node-semver#907 | fix: preserve prerelease alternatives alongside wildcard ranges | x0Lazarus | 50 | 39 | 23d | medium | — |
| npm/cli#9945 | fix: report blocked install scripts when reify or a root script fails | lazerg | 49 | 89 | 46d | high | weight-sensitive |
| npm/cli#10123 | fix(view): format publisher metadata containing actor information | sergioperezcheco | 49 | 51 | 5d | medium | — |
| npm/node-semver#913 | fix: reject empty range intersections with ANY | json-open-source | 49 | 46 | 17d | medium | — |
| npm/node-which#185 | fix: resolve Windows worker PATH names case-insensitively | Dcastroro | 49 | 50 | 3d | medium | — |
| npm/cli#9875 | fix(arborist): prefer direct dependency bins | sanjayamaharjancodes | 48 | 56 | 66d | medium | — |
| npm/cli#10130 | fix(arborist): skip legacy dependency generation for v3 lockfiles | jeffwidman | 48 | 74 | 4d | medium | no-closing-issue, weight-sensitive |
Aged or waiting work where maintainer attention is the next useful action.
| Pull request | Title | Author | Backlog health | Complexity | Age | Confidence | Signals |
|---|---|---|---|---|---|---|---|
| npm/agent#173 | Add MIT LICENSE.md | Suryaseenivasan2005 | 95 | 0 | 107d | medium | — |
| npm/make-fetch-happen#376 | fix: strip credentials on cross-origin redirects | arthurianresolve | 95 | 0 | 42d | medium | — |
| npm/npm-audit-report#133 | Ignore unfixed issues for exit code | greenjava | 95 | 0 | 819d | medium | no-closing-issue |
| npm/types#171 | Add 'trustedPublisher' and 'attestations' types | bodadotsh | 95 | 40 | 313d | medium | no-closing-issue |
| npm/documentation#990 | Add additional npm features to documentation | JAY1820 | 94 | 63 | 962d | medium | no-closing-issue |
| npm/cli#7059 | fix(arborist): node.target can be null when it is a file dep or symlink | ljharb | 93 | 95 | 1048d | medium | no-closing-issue |
| npm/node-semver#880 | fix: compare large numeric prerelease ids without precision loss | spokodev | 93 | 29 | 116d | medium | no-closing-issue |
| npm/pacote#512 | fix: do not forward allow-scripts to git preparation | carrerasdarren-cell | 90 | 0 | 89d | medium | — |
| npm/cli#7710 | fix: stop optional dependencies from being added to prod inside lockfile | rahulio96 | 89 | 70 | 802d | medium | — |
| npm/node-semver#885 | fix: intersects() false-negative for <0.0.0-<prerelease> comparators | binggao1230 | 89 | 64 | 107d | medium | no-closing-issue |
| npm/cli#8019 | docs: Add section on workspace version bumps | v-kchindam-infy | 87 | 21 | 648d | medium | no-closing-issue |
| npm/hosted-git-info#344 | feat: add opt-in support for repository.directory in file() | ljharb | 87 | 60 | 5d | medium | no-closing-issue |
| npm/rfcs#35 | rfc: @pika/pack available in stock npm | iarna | 87 | 9 | 2785d | medium | no-closing-issue |
| npm/node-semver#888 | docs: clarify includePrerelease hyphen ranges | vibhor-aggr | 86 | 0 | 100d | medium | no-closing-issue |
| npm/documentation#1525 | feat(install): add instructions for git packages | avivkeller | 85 | 81 | 572d | medium | no-closing-issue |
| npm/ini#299 | fix: scope duplicate key tracking per section with bracketedArray=false | abhu85 | 83 | 70 | 238d | medium | — |
| npm/rfcs#24 | For unpublished versions, have registry return 410 Gone and clients re-resolve semantic version | markstos | 83 | 52 | 2874d | medium | no-closing-issue |
| npm/cli#8323 | Introduce --fail-fast flag for npm run in workspaces | bralax | 81 | 81 | 512d | medium | no-closing-issue |
| npm/cli#8691 | feat: add JSR protocol support for package specifiers | eser | 81 | 78 | 363d | medium | no-closing-issue |
| npm/node-semver#890 | fix: minVersion returns the true minimum for `>` in includePrerelease mode | spokodev | 81 | 11 | 88d | medium | no-closing-issue |
| npm/cli#8789 | docs: document forceAuth option for libnpmpublish | MaxBlack-dev | 80 | 12 | 324d | high | — |
| npm/cli#8903 | fix(ls): fix descriptions in --long human output | jbrobst | 80 | 55 | 279d | medium | no-closing-issue |
| npm/git#231 | Replace StrictHostKeyChecking=accept-new with BatchMode=yes | klassiker | 80 | 100 | 311d | medium | — |
| npm/cli#9158 | fix: surface failed package delete during unpublish | buley | 79 | 72 | 206d | medium | no-closing-issue |
| npm/node-semver#889 | fix: subset false-positive with a prerelease eq and a differing bound | spokodev | 79 | 57 | 88d | medium | no-closing-issue |
| npm/cli#9171 | fix: preserve script output lacking a final newline | priyanshurav | 78 | 13 | 202d | medium | weight-sensitive |
| npm/ini#295 | feat: support for multiline values [issue #33] | pgalbraith | 77 | 100 | 340d | medium | no-closing-issue |
| npm/rfcs#150 | RFC: Add file+pack dependency protocol | RecuencoJones | 77 | 23 | 2340d | medium | no-closing-issue |
| npm/types#185 | fix: add types for deprecated license format | wojtekmaj | 77 | 0 | 256d | medium | — |
| npm/cli#9543 | fix(arborist): skip re-resolution when audit fix requires semver-major bump | Zelys-DFKH | 76 | 74 | 130d | high | — |
Blocked work that needs changes, tests, conflict resolution, or discussion from the contributor.
| Pull request | Title | Author | Issue impact | Complexity | Age | Confidence | Signals |
|---|---|---|---|---|---|---|---|
| npm/cli#9688 | fix #4263: preserve resolved/integrity in package-lock.json when loading from cache | Amilliox | 100 | 15 | 113d | medium | missing-tests, weight-sensitive |
| npm/rfcs#857 | Exclude node_modules from Time Machine backups | guillaumekh | 100 | 98 | 217d | medium | changes-requested, unresolved-threads:9 |
| npm/cli#5442 | fix: version does not git-commit nor git-tag when package in subdir | timothybonci | 99 | 92 | 1511d | medium | merge-conflict, changes-requested, weight-sensitive |
| npm/documentation#1480 | Feature: Dark mode | laine-hallot | 99 | 93 | 613d | medium | merge-conflict |
| npm/cli#9689 | fix #3466: include bundledDependencies in workspace npm pack | Amilliox | 99 | 20 | 113d | medium | missing-tests, weight-sensitive |
| npm/cli#9762 | fix(arborist): build inventory before calling workspaceNodes | crhallberg | 97 | 4 | 98d | medium | missing-tests, weight-sensitive |
| npm/cli#8310 | fix(arborist): don't checkEngine/checkPlatform for extraneous deps | YodaDaCoda | 96 | 75 | 517d | medium | merge-conflict, weight-sensitive |
| npm/cli#9725 | fix(arborist): regression of workspace overrides | Tofandel | 96 | 8 | 105d | medium | missing-tests, weight-sensitive |
| npm/cli#9768 | fix(libnpmexec): honor min-release-age-exclude in npx | Sanjays2402 | 96 | 85 | 96d | medium | changes-requested, unresolved-threads:1, weight-sensitive |
| npm/node-semver#854 | fix: handle OR-range unions in subset() (#703) | abhu85 | 95 | 86 | 173d | high | changes-requested, unresolved-threads:3 |
| npm/cli#9818 | fix(arborist): allow registry bundle inspection in dry runs | yszgj-30 | 94 | 88 | 82d | high | unresolved-threads:3 |
| npm/cli#5962 | fix: Cannot read properties of undefined (reading 'description') | vrubezhny | 91 | 4 | 1406d | medium | missing-tests, merge-conflict, weight-sensitive |
| npm/cli#9921 | fix(arborist): recognize registry-mediated tarballs | martinrrm | 91 | 98 | 53d | high | unresolved-threads:2 |
| npm/cli#9754 | fix(arborist): allow `npm audit fix` to downgrade to a patched older version | tanistheta | 90 | 71 | 99d | medium | merge-conflict, weight-sensitive |
| npm/cli#3907 | feat(config): Add --prune config option | KochiyaOcean | 89 | 86 | 1828d | medium | merge-conflict, weight-sensitive |
| npm/cli#7757 | fix: prevent infinite recursion when looking up real paths | BenMcLean | 88 | 7 | 782d | medium | missing-tests, weight-sensitive |
| npm/cli#9159 | fix: resolve symlink in workspace node_modules when --workspace flag … | yetanotheraryan | 88 | 61 | 205d | medium | merge-conflict, weight-sensitive |
| npm/cli#7752 | fix(arborist): check placed node children for missing deps (#7746) | TrevorBurnham | 82 | 99 | 785d | medium | merge-conflict, weight-sensitive |
| npm/cli#8200 | fix(aborist): handle missing link targets in load-virtual.js | domdomegg | 81 | 28 | 567d | medium | merge-conflict, weight-sensitive |
| npm/cli#7996 | docs: correct incorrect desc and usage in npm-completion.md | vassudanagunta | 80 | 11 | 666d | medium | merge-conflict, weight-sensitive |
| npm/cli#9906 | fix(arborist): normalize file and directory paths in allowScripts matcher | anasysuf | 72 | 64 | 59d | medium | merge-conflict, weight-sensitive |
| npm/documentation#1653 | docs: added type field in the documentation of package.json | anuj123upadhyay | 70 | 78 | 475d | medium | unresolved-threads:1 |
| npm/documentation#1976 | docs: add ES module note to packages and modules page | sripavantejb | 67 | 37 | 142d | medium | unresolved-threads:1 |
| npm/cli#8415 | fix: Fix using environment variables to specify prefix | MarcellPerger1 | 66 | 9 | 473d | medium | missing-tests, weight-sensitive |
| npm/cli#8217 | fix(ls): correctly show deduped dependencies | milaninfy | 64 | 88 | 558d | high | merge-conflict, weight-sensitive |
| npm/cli#7233 | fix: issue-5280 Ensure save flags update package.json | ficocelliguy | 63 | 49 | 973d | medium | unresolved-threads:4, weight-sensitive |
| npm/cli#7118 | issue/5051 - incorrect peer dependencies on v1 lockfile upgrade | siemhesda | 62 | 17 | 1020d | medium | missing-tests, merge-conflict, weight-sensitive |
| npm/cli#9683 | fix(arborist): skip extraneous orphans in strict-allow-scripts gate | Sanjays2402 | 62 | 87 | 114d | medium | unresolved-threads:6 |
| npm/cli#9763 | docs: mention lifecycle script blocking in npm 12 release notes | prayag0one4 | 60 | 1 | 98d | medium | merge-conflict, unresolved-threads:1, weight-sensitive |
| npm/cli#7097 | fix: don't emit package-lock.json when package.json does not exist | xiongmao86 | 58 | 79 | 1031d | medium | merge-conflict, unresolved-threads:2 |
Low-context contributions requiring human assessment of fit and value.
| Pull request | Title | Author | Quick win | Complexity | Age | Confidence | Signals |
|---|---|---|---|---|---|---|---|
| npm/cli#10081 | mvvvip LEE Update npm-shrinkwrap.json documentation metadata | keonglee1341 | 90 | 2 | 14d | medium | no-closing-issue, low-context-first-contribution |
| npm/documentation#2055 | Update about-audit-reports.mdx | Loncakovandrej789 | 84 | 7 | 8d | medium | no-closing-issue, low-context-first-contribution |
| npm/documentation#2059 | Rename trusted-publishers.mdx to trusted-publishers.mdx | zskbot | 84 | 7 | 7d | medium | no-closing-issue, low-context-first-contribution |
| npm/documentation#2054 | Rename about-access-tokens.mdx to about-access-tokens.mdx | zskbot | 84 | 7 | 10d | medium | no-closing-issue, low-context-first-contribution |
| npm/documentation#2057 | Rename about-access-tokens.mdx to about-access-tokens.mdx | zskbot | 84 | 7 | 7d | medium | no-closing-issue, low-context-first-contribution |
| npm/documentation#2010 | Update creating-and-viewing-access-tokens.mdx | Ahmedewa | 83 | 7 | 90d | medium | no-closing-issue, low-context-first-contribution |
| npm/rfcs#281 | NPM package release hashes stored on the blockchain | sean-lawless | 79 | 18 | 2170d | medium | no-closing-issue, low-context-first-contribution |
| npm/documentation#1999 | Update about-access-tokens.mdx | Ghostv13-dev | 79 | 19 | 103d | medium | no-closing-issue, low-context-first-contribution |
| npm/rfcs#640 | RFC: dist-tag resolution correction | gemwuu | 78 | 20 | 1476d | medium | no-closing-issue, low-context-first-contribution |
| npm/rfcs#397 | RFC: Peer dependencies should be able to match a full range of prerelease versions | alasdairhurst | 76 | 25 | 1956d | medium | no-closing-issue, low-context-first-contribution |
| npm/rfcs#418 | RFC: Trust system root CA certificates | deltoura | 73 | 32 | 1910d | medium | no-closing-issue, low-context-first-contribution |
| npm/documentation#2007 | Update access tokens documentation | oberoimanav23-web | 63 | 50 | 93d | medium | no-closing-issue, low-context-first-contribution |
| npm/documentation#2012 | Update downloading-and-installing-node-js-and-npm.mdx | corkumandrew557-tech | 62 | 59 | 87d | medium | no-closing-issue, low-context-first-contribution |
| npm/documentation#1994 | Update downloading-and-installing-node-js-and-npm.mdx | cheekathijyothi-cloud | 62 | 50 | 110d | medium | no-closing-issue, low-context-first-contribution |
| npm/rfcs#405 | RFC: Resolve packages based on Node.js version | shalvah | 58 | 64 | 1937d | medium | no-closing-issue, low-context-first-contribution |
| npm/rfcs#642 | RFC: Vendoring dependencies | winterqt | 55 | 11 | 1473d | medium | no-closing-issue, unresolved-threads:1, low-context-first-contribution |
| npm/rfcs#138 | RFC: Add configurable data to HTTP header | Mykyta | 55 | 61 | 2350d | medium | no-closing-issue, unresolved-threads:1, low-context-first-contribution |
| npm/rfcs#152 | RFC: npm fund depth | fishcharlie | 55 | 57 | 2339d | medium | no-closing-issue, unresolved-threads:1, low-context-first-contribution |
| npm/documentation#2011 | Implement GitHub Actions workflow for NPM | granjacours697-netizen | 53 | 74 | 89d | medium | no-closing-issue, unresolved-threads:1, low-context-first-contribution |
| npm/rfcs#22 | Add feature to show dependencies of a particular dependency | alanyinjs | 35 | 27 | 2922d | medium | no-closing-issue, changes-requested, low-context-first-contribution |
| npm/rfcs#34 | RFC for dependencies change script addition | dhedgecock | 35 | 15 | 2825d | medium | no-closing-issue, changes-requested, unresolved-threads:4 |
| npm/rfcs#76 | rfc: Signed Packuments | retrohacker | 35 | 66 | 2502d | medium | no-closing-issue, changes-requested, unresolved-threads:1 |
| npm/ini#247 | feat: support parse and stringify with comments | lheberlie | 35 | 90 | 950d | medium | no-closing-issue, changes-requested, unresolved-threads:4 |
| npm/read-cmd-shim#3 | return EISDIR if path is a directory | vyv03354 | 34 | 100 | 3292d | medium | no-closing-issue, merge-conflict, low-context-first-contribution |
Potential duplicates or policy concerns requiring explicit human confirmation.
| Pull request | Title | Author | Backlog health | Complexity | Age | Confidence | Signals |
|---|---|---|---|---|---|---|---|
| npm/cli#9866 | Fix: Bump node-gyp from 13.0.0 to 13.0.1 to address the vulnerability | keshav-poojary | 56 | 92 | 69d | medium | policy:dependency-update, no-closing-issue, merge-conflict |
| npm/cli#10028 | Rename docs/lib/content/configuring-npm/package-lock-json.md to docs/… | NickerHurner | 34 | 1 | 26d | medium | no-closing-issue, low-context-first-contribution, possible-duplicate-or-superseded |
| npm/cli#10032 | chore: update `create-node-pr` node checkout to actions/checkout@v7 | lazerg | 33 | 10 | 25d | high | policy:tooling-automation, unresolved-threads:1 |
| npm/documentation#2048 | chore: move to Node.js's doc-kit | avivkeller | 22 | 100 | 18d | low | policy:tooling-automation, no-closing-issue, merge-conflict |
| npm/cli#10105 | Add Terraform CI workflow for GitHub Actions | tt900 | 19 | 30 | 9d | medium | policy:tooling-automation, no-closing-issue |