Node.js NPM & Package Management 4

Question 1

How do you install a specific version of a package, e.g., lodash version 4.17.15?

Accepted Answer

npm install lodash@4.17.15

Answer

Appending `@version` to the package name tells npm to install that exact version.

Question 2

What is the purpose of `.npmignore`?

Accepted Answer

Specifies files to exclude when publishing a package to the registry

Answer

`.npmignore` lists files and directories that should be omitted from the published package tarball, similar to `.gitignore`.

Question 3

What is a scoped npm package?

Accepted Answer

A package whose name is prefixed with `@username/` or `@org/`

Answer

Scoped packages use the `@scope/name` naming convention to namespace packages under a user or organization.

Question 4

Which command shows the full dependency tree of installed packages?

Accepted Answer

npm list

Answer

`npm list` (or `npm ls`) prints the dependency tree of the current project's node_modules.

Question 5

What does `npm audit fix` do?

Accepted Answer

Automatically updates vulnerable dependencies to patched versions when possible

Answer

`npm audit fix` installs compatible updates for packages with known vulnerabilities, staying within semver ranges defined in package.json.

Node.js Practice Test