npm LL

Privacy policy

npm LL Privacy Policy

npm LL is a local-first VS Code extension for managing npm packages across your Node.js workspace.

Data npm LL reads

npm LL reads package and configuration files in your workspace — such as package.json and .npmrc — and resolved versions from node_modules, so it can show your workspace packages, dependencies, and registries.

Registry requests

When you search or view package details, npm LL sends queries directly from VS Code to the npm registry (registry.npmjs.org) or the registries you have configured. It uses the public npm registry HTTP API and your existing registry settings.

Local npm CLI

Installing, updating, removing, running npm install, and running outdated, vulnerable, and deprecated checks invoke the npm CLI on your machine against your own packages, via spawn with argument arrays — never through a shell. Nothing is sent to a server owned by this extension.

No backend and no telemetry

npm LL does not operate a backend service for extension data. It does not collect analytics, crash reports, package contents, package names, or usage history.

Edits to your files

npm LL only modifies package and configuration files in response to actions you take, and always asks before touching shared files such as the workspaces-root package.json. File writes stay inside your workspace.

Credentials

npm LL reads .npmrc registries read-only to learn which registries exist and whether auth is configured; it never stores tokens. Passwords, tokens, API keys, and URL-embedded credentials are masked in the output channel and the UI.

Third-party registries

npm registries (registry.npmjs.org and any private registries you configure) operate under their own privacy policies and terms. The developer is not responsible for how those registries handle requests sent to them.

No warranty

npm LL is provided on an "as is" and "as available" basis, without warranties of any kind, express or implied. Use of the extension is at your own risk.

Limitation of liability

To the maximum extent permitted by law, the developer is not liable for any damages arising from use of npm LL, including but not limited to data loss, build breakage, loss of profits, or business interruption.

User responsibility

You are solely responsible for the packages you install, the registries you trust, and any changes made to your packages through npm LL. Review dependency and version changes before committing them.