Node.js NPM & Package Management 2

Question 1

What does the `--save-exact` flag do when running `npm install`?

Accepted Answer

Pins the exact version instead of using a caret range

Answer

Saves the package to devDependencies

Answer

Installs without updating package-lock.json

Answer

Forces a fresh install ignoring cache

Question 2

Which npm command removes a package from node_modules AND from package.json?

Accepted Answer

npm uninstall

Answer

npm delete

Answer

npm remove

Answer

npm purge

Question 3

What is the purpose of `npm ci` compared to `npm install`?

Accepted Answer

It installs from package-lock.json exactly, deleting node_modules first

Answer

It installs only CI-specific packages

Answer

It creates a new package-lock.json

Answer

It checks for security vulnerabilities

Question 4

Which file should you commit to version control to lock dependency versions for a library package?

Accepted Answer

Both package.json and package-lock.json

Answer

package-lock.json only

Answer

package.json only

Answer

shrinkwrap.json

Question 5

How do you view all globally installed npm packages?

Accepted Answer

npm list -g --depth=0

Answer

npm list

Answer

npm global list

Answer

npm show -g

Question 6

What does `npm outdated` report?

Accepted Answer

Packages where the installed version is behind the wanted or latest version

Answer

Packages with security vulnerabilities

Answer

Packages not listed in package.json

Answer

Deprecated packages

Question 7

What is the effect of setting `"private": true` in package.json?

Accepted Answer

Prevents the package from being accidentally published to the npm registry

Answer

Hides the package from npm search

Answer

Restricts install to private networks only

Answer

Enables scoped package resolution