What npm does

npm is the world's largest software registry and the de facto package manager for the JavaScript and Node.js ecosystem, serving more than 17 million developers worldwide with a catalog of over 2 million open-source packages. Its core technology comprises two components: the npm Registry, a public, searchable repository of JavaScript packages, and the npm CLI, the command-line client used to install, publish, and manage dependencies. The registry originated as an open-source project created by Isaac Z. Schlueter in 2009; the company npm, Inc. was formally founded in 2014 in Oakland, California, and was acquired by GitHub in March 2020, making it a subsidiary within Microsoft's developer-platform organization. The product surface has since been extended with two paid subscription tiers — npm Pro ($7/month for individuals) and npm Teams ($7 per user per month for organizations) — that monetize private package hosting, package-based permissions, and team-based access controls on top of the free public registry.

The business model is a classic freemium, product-led-growth construct. The public registry and CLI are offered at no charge, driving organic adoption and word-of-mouth distribution through the JavaScript community and GitHub's integrated developer workflows. Conversion to revenue occurs when developers or organizations need private packages or team-collaboration features, both of which are gated behind the Pro and Teams tiers and sold through self-serve signup flows on npmjs.com. Distribution is almost entirely digital and global, with no geographic restrictions disclosed. The platform's scale (2M+ packages, 17M+ developers) creates a powerful network effect that locks in default-selection behavior across the Node.js ecosystem, and the GitHub/Microsoft ownership layer provides distribution reach that would be effectively impossible to replicate independently.

Strategic activity in the 2025-2026 window has been dominated by security hardening rather than expansion: a December 2025 authentication overhaul following the Sha1-Hulud supply-chain worm, June 2026 mandatory 2FA plus cryptographic provenance for high-dependency packages, and the npm v12 release in July 2026, which changed install defaults for the first time in the project's history to require explicit opt-in for install scripts and remote dependencies. These launches reflect a defensive posture responding to repeated supply-chain attacks (Shai-Hulud, eslint-config-prettier compromise, Toptal's Picasso packages), and underscore that npm's primary near-term strategic priority is preserving registry trust and integrity rather than launching new monetization surfaces.

Name

npm

Legal name

npm, Inc.

Website

https://npmjs.com

Company type

Private

Founded year

2014

Operating status

Operating

Headcount range

11–50 employees

Short description

npm operates the world's largest software registry and command-line package manager for JavaScript and Node.js, serving over 17 million developers with a free public catalog of more than 2 million packages and monetizing through $7/month Pro and $7-per-seat Teams subscriptions for private packages and team-based access controls.

Ownership category

akta.pro rank

Product category

Developer Tools - Package Management

NAICS

Software Publishers (513210)

SIC

Services-Prepackaged Software (7372)

akta.pro primary industry

Enterprise & Private App Stores (MDM/MAM) (BPAMADAE)

Keywords

• JavaScript package manager
• Node.js package registry
• Open source software registry
• Developer collaboration tools
• Software dependency management

Headquarters

HQ city

Oakland

HQ country

United States

HQ region

North America

Markets served

GTM type

B2B and B2C

Offering type

Software

Cost components

Technology or R&D, Infrastructure, Personnel, Operations

Revenue model

1. npm Pro Subscription: Paid subscription tier offering unlimited private packages, package-based permissions, and premium features for individual developers. Priced at $7 per month.
2. npm Teams Subscription: Team-based subscription providing collaborative access controls, package permissions management, and team administration features for organizations. Priced per user.

Pricing tiers

Go-to-market motion1 record

Distribution channels2 records

Marketing channels3 records

Core offering

npm operates the world's largest software registry for JavaScript/Node.js, comprising the free public npm Registry (over 2 million open-source packages) and the npm CLI client for installing and publishing packages. Revenue is generated through two paid subscription tiers: npm Pro ($7/month) for individual developers needing unlimited private packages and package-based permissions, and npm Teams ($7/user/month) for organizations requiring collaborative access controls and team-based package permission management.

Product overview

npm is a package manager for Node.js, consisting of three core components: the npm Registry (a public collection of over two million open-source packages), the npm CLI (the command line client for installing and publishing packages), and two subscription tiers (Pro and Teams). npm Pro offers individual developers unlimited public and private packages with package-based permissions, while npm Teams provides organization-wide access controls for collaborative package management. GitHub acquired npm in 2020 and offers these tools free for public packages while monetizing through Pro and Teams subscriptions for private package hosting.

Differentiator

Problem solved

Functional benefit

Products and services

• npm Registry The world's largest software registry containing over two million open-source JavaScript packages, serving as the central hub for Node.js code sharing. Free for unlimited public packages and used by 17+ million developers worldwide.
• npm CLI The command-line client that allows developers to install and publish packages to the npm Registry, providing dependency resolution and package management for Node.js projects.
• npm Pro Premium subscription tier for individual developers providing unlimited private packages with package-based permissions and automatic security warnings. Priced at $7 per month.
• npm Teams Team-based subscription providing collaborative access controls, package permissions management, and team administration features for organizations. Priced at $7 per user per month.

Named customers1 record

Segments2 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Partnerships

One partnership is on record.

• GitHubcoreOthers · 1 March 2020GitHub acquired npm, Inc. in March 2020. npm operates as part of GitHub, with the company offering npm Registry and npm CLI to the developer community for free while GitHub provides infrastructure and resources.

Scale indicators3 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• PyPI (Python Package Index): The default open-source package registry for the Python ecosystem, directly analogous to npm's role for JavaScript. Both host millions of packages, follow a similar governance model, and serve as the central distribution point for their respective language communities.
• crates.io: The official open-source package registry for the Rust programming language, run by the Rust Foundation. Operates the same fundamental model as npm: a public registry, a CLI client, and a community of publishers and consumers for a single language ecosystem.
• RubyGems: The canonical package hosting service for the Ruby language, providing gem distribution and a comparable registry-plus-CLI architecture to npm. Serves the same developer-tooling and open-source distribution function for the Ruby community.
• Maven Central: The default public package repository for Java and JVM-based languages. Operates as the central artifact distribution point for the Java ecosystem in the same way npm does for JavaScript, with the same trade-offs around open-source publishing, security, and supply chain risk.
• pnpm: A fast, disk-efficient alternative package manager for JavaScript that interoperates with the npm registry. Direct competitor to the npm CLI on performance and developer experience, even though packages themselves are sourced from the same registry.
• Yarn: An open-source JavaScript package manager originally created by Facebook/Meta as a faster, more deterministic alternative to the npm CLI. Competes head-to-head with the npm CLI for developer mindshare and default-tooling status, though it also publishes to and consumes from the npm registry.

Broad incumbents

• JFrog (Artifactory): Enterprise-grade artifact repository and DevOps platform that supports npm packages alongside Maven, Docker, and many other formats. Competes with npm in the enterprise and regulated-customer segments that require private, controlled, and auditable artifact storage.
• Sonatype (Nexus Repository): Provider of Nexus Repository, a widely deployed enterprise artifact repository that proxies and hosts npm (and other) packages. Operates the Maven Central infrastructure and competes with npm in the enterprise and supply chain security market.
• GitHub Packages: GitHub's own package hosting service that supports npm, Maven, NuGet, Ruby, and Docker artifacts within the GitHub platform. Operates inside the same parent organization as npm, creating internal overlap in package hosting and competing for enterprise package management spend.

Emerging players

• Bun: An all-in-one JavaScript runtime and toolkit that ships with a built-in package manager designed as a drop-in replacement for the npm CLI. An emerging player whose adoption could shift default package-manager behavior away from npm's own CLI, even while continuing to read from the npm registry.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat6 records

Key risks6 records

Key highlights6 records

Customer concentration

• Xx.com/npmjs

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds4 records

Investors7 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A1 record

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about npm