kartykp/gat-bypass-2fa-docs
@reggi/path-to-regexp
dependabot/npm_and_yarn/main/copy-to-clipboard-4.0.2
dependabot/npm_and_yarn/main/eslint-10.4.0
dependabot/npm_and_yarn/main/npmcli/eslint-config-7.0.0
dependabot/npm_and_yarn/main/proc-log-7.0.0
dependabot/npm_and_yarn/npm_and_yarn-826852524d
dependabot/npm_and_yarn/npm_and_yarn-ab9a7f4bc2
deprecate-totp-2fa
dhei/classic-tokens
gat-bypass-2fa-docs
jpg619/fix-accessibility-content-flow
jpg619/version-bump-tar-2
kartykp/gat-bypass-2fa-docs
kartykp/upgrade-path-to-regex
main
maitxn/version-bump-tar
patch-1
reggi/cache-based-on-version
reggi/dev-engines
reggi/fix-transform-prettier
reggi/overrides
update-search-sensitivity
| 1 | --- |
| 2 | title: scripts |
| 3 | section: 7 |
| 4 | description: How npm handles the "scripts" field |
| 5 | github_repo: npm/cli |
| 6 | github_branch: latest |
| 7 | github_path: docs/lib/content/using-npm/scripts.md |
| 8 | redirect_from: |
| 9 | - /cli-documentation/misc/scripts |
| 10 | - /cli-documentation/using-npm/scripts |
| 11 | - /cli-documentation/v11/misc/scripts |
| 12 | - /cli-documentation/v11/using-npm/scripts |
| 13 | - /cli/misc/scripts |
| 14 | - /cli/using-npm/scripts |
| 15 | - /cli/v11/misc/scripts |
| 16 | - /misc/scripts |
| 17 | - /using-npm/scripts |
| 18 | --- |
| 19 | |
| 20 | ### Description |
| 21 | |
| 22 | The `"scripts"` property of your `package.json` file supports a number of built-in scripts and their preset life cycle events as well as arbitrary scripts. These all can be executed by running `npm run <stage>`. _Pre_ and _post_ commands with matching names will be run for those as well (e.g. `premyscript`, `myscript`, `postmyscript`). Scripts from dependencies can be run with `npm explore <pkg> -- npm run <stage>`. |
| 23 | |
| 24 | ### Pre & Post Scripts |
| 25 | |
| 26 | To create "pre" or "post" scripts for any scripts defined in the `"scripts"` section of the `package.json`, simply create another script _with a matching name_ and add "pre" or "post" to the beginning of them. |
| 27 | |
| 28 | ```json |
| 29 | { |
| 30 | "scripts": { |
| 31 | "precompress": "{{ executes BEFORE the `compress` script }}", |
| 32 | "compress": "{{ run command to compress files }}", |
| 33 | "postcompress": "{{ executes AFTER `compress` script }}" |
| 34 | } |
| 35 | } |
| 36 | ``` |
| 37 | |
| 38 | In this example `npm run compress` would execute these scripts as described. |
| 39 | |
| 40 | ### Life Cycle Scripts |
| 41 | |
| 42 | There are some special life cycle scripts that happen only in certain situations. These scripts happen in addition to the `pre<event>`, `post<event>`, and `<event>` scripts. |
| 43 | |
| 44 | - `prepare`, `prepublish`, `prepublishOnly`, `prepack`, `postpack`, `dependencies` |
| 45 | |
| 46 | **prepare** (since `npm@4.0.0`) |
| 47 | |
| 48 | - Runs BEFORE the package is packed, i.e. during `npm publish` and `npm pack` |
| 49 | - Runs on local `npm install` without any arguments |
| 50 | - Runs AFTER `prepublish`, but BEFORE `prepublishOnly` |
| 51 | - Runs for a package if it's being installed as a link through `npm install <folder>` |
| 52 | |
| 53 | - NOTE: If a package being installed through git contains a `prepare` script, its `dependencies` and `devDependencies` will be installed, and the prepare script will be run, before the package is packaged and installed. |
| 54 | |
| 55 | - As of `npm@7` these scripts run in the background. To see the output, run with: `--foreground-scripts`. |
| 56 | |
| 57 | **prepublish** (DEPRECATED) |
| 58 | |
| 59 | - Does not run during `npm publish`, but does run during `npm ci` and `npm install`. See below for more info. |
| 60 | |
| 61 | **prepublishOnly** |
| 62 | |
| 63 | - Runs BEFORE the package is prepared and packed, ONLY on `npm publish`. |
| 64 | |
| 65 | **prepack** |
| 66 | |
| 67 | - Runs BEFORE a tarball is packed (on "`npm pack`", "`npm publish`", and when installing a git dependency). |
| 68 | - NOTE: "`npm run pack`" is NOT the same as "`npm pack`". "`npm run pack`" is an arbitrary user defined script name, whereas, "`npm pack`" is a CLI defined command. |
| 69 | |
| 70 | **postpack** |
| 71 | |
| 72 | - Runs AFTER the tarball has been generated but before it is moved to its final destination (if at all, publish does not save the tarball locally) |
| 73 | |
| 74 | **dependencies** |
| 75 | |
| 76 | - Runs AFTER any operations that modify the `node_modules` directory IF changes occurred. |
| 77 | - Does NOT run in global mode |
| 78 | |
| 79 | #### Prepare and Prepublish |
| 80 | |
| 81 | **Deprecation Note: prepublish** |
| 82 | |
| 83 | Since `npm@1.1.71`, the npm CLI has run the `prepublish` script for both `npm publish` and `npm install`, because it's a convenient way to prepare a package for use (some common use cases are described in the section below). It has also turned out to be, in practice, [very confusing](https://github.com/npm/npm/issues/10074). As of `npm@4.0.0`, a new event has been introduced, `prepare`, that preserves this existing behavior. A _new_ event, `prepublishOnly` has been added as a transitional strategy to allow users to avoid the confusing behavior of existing npm versions and only run on `npm publish` (for instance, running the tests one last time to ensure they're in good shape). |
| 84 | |
| 85 | See [https://github.com/npm/npm/issues/10074](https://github.com/npm/npm/issues/10074) for a much lengthier justification, with further reading, for this change. |
| 86 | |
| 87 | **Use Cases** |
| 88 | |
| 89 | If you need to perform operations on your package before it is used, in a way that is not dependent on the operating system or architecture of the target system, use a `prepublish` script. This includes tasks such as: |
| 90 | |
| 91 | - Compiling CoffeeScript source code into JavaScript. |
| 92 | - Creating minified versions of JavaScript source code. |
| 93 | - Fetching remote resources that your package will use. |
| 94 | |
| 95 | The advantage of doing these things at `prepublish` time is that they can be done once, in a single place, thus reducing complexity and variability. Additionally, this means that: |
| 96 | |
| 97 | - You can depend on `coffee-script` as a `devDependency`, and thus your users don't need to have it installed. |
| 98 | - You don't need to include minifiers in your package, reducing the size for your users. |
| 99 | - You don't need to rely on your users having `curl` or `wget` or other system tools on the target machines. |
| 100 | |
| 101 | #### Dependencies |
| 102 | |
| 103 | The `dependencies` script is run any time an `npm` command causes changes to the `node_modules` directory. It is run AFTER the changes have been applied and the `package.json` and `package-lock.json` files have been updated. |
| 104 | |
| 105 | ### Life Cycle Operation Order |
| 106 | |
| 107 | #### [`npm cache add`](/cli/v11/commands/npm-cache) |
| 108 | |
| 109 | - `prepare` |
| 110 | |
| 111 | #### [`npm ci`](/cli/v11/commands/npm-ci) |
| 112 | |
| 113 | - `preinstall` |
| 114 | - `install` |
| 115 | - `postinstall` |
| 116 | - `prepublish` |
| 117 | - `preprepare` |
| 118 | - `prepare` |
| 119 | - `postprepare` |
| 120 | |
| 121 | These all run after the actual installation of modules into `node_modules`, in order, with no internal actions happening in between |
| 122 | |
| 123 | #### [`npm diff`](/cli/v11/commands/npm-diff) |
| 124 | |
| 125 | - `prepare` |
| 126 | |
| 127 | #### [`npm install`](/cli/v11/commands/npm-install) |
| 128 | |
| 129 | These also run when you run `npm install -g <pkg-name>` |
| 130 | |
| 131 | - `preinstall` |
| 132 | - `install` |
| 133 | - `postinstall` |
| 134 | - `prepublish` |
| 135 | - `preprepare` |
| 136 | - `prepare` |
| 137 | - `postprepare` |
| 138 | |
| 139 | If there is a `binding.gyp` file in the root of your package and you haven't defined your own `install` or `preinstall` scripts, npm will default the `install` command to compile using node-gyp via `node-gyp rebuild` |
| 140 | |
| 141 | These are run from the scripts of `<pkg-name>` |
| 142 | |
| 143 | #### [`npm pack`](/cli/v11/commands/npm-pack) |
| 144 | |
| 145 | - `prepack` |
| 146 | - `prepare` |
| 147 | - `postpack` |
| 148 | |
| 149 | #### [`npm publish`](/cli/v11/commands/npm-publish) |
| 150 | |
| 151 | - `prepublishOnly` |
| 152 | - `prepack` |
| 153 | - `prepare` |
| 154 | - `postpack` |
| 155 | - `publish` |
| 156 | - `postpublish` |
| 157 | |
| 158 | #### [`npm rebuild`](/cli/v11/commands/npm-rebuild) |
| 159 | |
| 160 | - `preinstall` |
| 161 | - `install` |
| 162 | - `postinstall` |
| 163 | - `prepare` |
| 164 | |
| 165 | `prepare` is only run if the current directory is a symlink (e.g. with linked packages) |
| 166 | |
| 167 | #### [`npm restart`](/cli/v11/commands/npm-restart) |
| 168 | |
| 169 | If there is a `restart` script defined, these events are run; otherwise, `stop` and `start` are both run if present, including their `pre` and `post` iterations) |
| 170 | |
| 171 | - `prerestart` |
| 172 | - `restart` |
| 173 | - `postrestart` |
| 174 | |
| 175 | #### [`npm run <user defined>`](/cli/v11/commands/npm-run) |
| 176 | |
| 177 | - `pre<user-defined>` |
| 178 | - `<user-defined>` |
| 179 | - `post<user-defined>` |
| 180 | |
| 181 | #### [`npm start`](/cli/v11/commands/npm-start) |
| 182 | |
| 183 | - `prestart` |
| 184 | - `start` |
| 185 | - `poststart` |
| 186 | |
| 187 | If there is a `server.js` file in the root of your package, then npm will default the `start` command to `node server.js`. `prestart` and `poststart` will still run in this case. |
| 188 | |
| 189 | #### [`npm stop`](/cli/v11/commands/npm-stop) |
| 190 | |
| 191 | - `prestop` |
| 192 | - `stop` |
| 193 | - `poststop` |
| 194 | |
| 195 | #### [`npm test`](/cli/v11/commands/npm-test) |
| 196 | |
| 197 | - `pretest` |
| 198 | - `test` |
| 199 | - `posttest` |
| 200 | |
| 201 | #### [`npm version`](/cli/v11/commands/npm-version) |
| 202 | |
| 203 | - `preversion` |
| 204 | - `version` |
| 205 | - `postversion` |
| 206 | |
| 207 | #### A Note on a lack of [`npm uninstall`](/cli/v11/commands/npm-uninstall) scripts |
| 208 | |
| 209 | While npm v6 had `uninstall` lifecycle scripts, npm v7 does not. Removal of a package can happen for a wide variety of reasons, and there's no clear way to currently give the script enough context to be useful. |
| 210 | |
| 211 | Reasons for a package removal include: |
| 212 | |
| 213 | - a user directly uninstalled this package |
| 214 | - a user uninstalled a dependent package and so this dependency is being uninstalled |
| 215 | - a user uninstalled a dependent package but another package also depends on this version |
| 216 | - this version has been merged as a duplicate with another version |
| 217 | - etc. |
| 218 | |
| 219 | Due to the lack of necessary context, `uninstall` lifecycle scripts are not implemented and will not function. |
| 220 | |
| 221 | ### Working Directory for Scripts |
| 222 | |
| 223 | Scripts are always run from the root of the package folder, regardless of what the current working directory is when `npm` is invoked. This means your scripts can reliably assume they are running in the package root. |
| 224 | |
| 225 | If you want your script to behave differently based on the directory you were in when you ran `npm`, you can use the `INIT_CWD` environment variable, which holds the full path you were in when you ran `npm run`. |
| 226 | |
| 227 | #### Historical Behavior in Older npm Versions |
| 228 | |
| 229 | For npm v6 and earlier, scripts were generally run from the root of the package, but there were rare cases and bugs in older versions where this was not guaranteed. If your package must support very old npm versions, you may wish to add a safeguard in your scripts (for example, by checking process.cwd()). |
| 230 | |
| 231 | For more details, see: |
| 232 | |
| 233 | - [npm v7 release notes](https://github.com/npm/cli/releases/tag/v7.0.0) |
| 234 | - [Discussion about script working directory reliability in npm v6 and earlier](https://github.com/npm/npm/issues/12356) |
| 235 | |
| 236 | ### User |
| 237 | |
| 238 | When npm is run as root, scripts are always run with the effective uid and gid of the working directory owner. |
| 239 | |
| 240 | ### Environment |
| 241 | |
| 242 | Package scripts run in an environment where many pieces of information are made available regarding the setup of npm and the current state of the process. |
| 243 | |
| 244 | #### path |
| 245 | |
| 246 | If you depend on modules that define executable scripts, like test suites, then those executables will be added to the `PATH` for executing the scripts. So, if your package.json has this: |
| 247 | |
| 248 | ```json |
| 249 | { |
| 250 | "name": "foo", |
| 251 | "dependencies": { |
| 252 | "bar": "0.1.x" |
| 253 | }, |
| 254 | "scripts": { |
| 255 | "start": "bar ./test" |
| 256 | } |
| 257 | } |
| 258 | ``` |
| 259 | |
| 260 | then you could run `npm start` to execute the `bar` script, which is exported into the `node_modules/.bin` directory on `npm install`. |
| 261 | |
| 262 | #### package.json vars |
| 263 | |
| 264 | The package.json fields are tacked onto the `npm_package_` prefix. So, for instance, if you had `{"name":"foo", "version":"1.2.5"}` in your package.json file, then your package scripts would have the `npm_package_name` environment variable set to "foo", and the `npm_package_version` set to "1.2.5". You can access these variables in your code with `process.env.npm_package_name` and `process.env.npm_package_version`, and so on for other fields. |
| 265 | |
| 266 | See [`package.json`](/cli/v11/configuring-npm/package-json) for more on package configs. |
| 267 | |
| 268 | #### current lifecycle event |
| 269 | |
| 270 | Lastly, the `npm_lifecycle_event` environment variable is set to whichever stage of the cycle is being executed. So, you could have a single script used for different parts of the process which switches based on what's currently happening. |
| 271 | |
| 272 | Objects are flattened following this format, so if you had `{"scripts":{"install":"foo.js"}}` in your package.json, then you'd see this in the script: |
| 273 | |
| 274 | ```bash |
| 275 | process.env.npm_package_scripts_install === "foo.js" |
| 276 | ``` |
| 277 | |
| 278 | ### Examples |
| 279 | |
| 280 | For example, if your package.json contains this: |
| 281 | |
| 282 | ```json |
| 283 | { |
| 284 | "scripts": { |
| 285 | "install": "scripts/install.js", |
| 286 | "postinstall": "scripts/install.js" |
| 287 | } |
| 288 | } |
| 289 | ``` |
| 290 | |
| 291 | then `scripts/install.js` will be called for the install and post-install stages of the lifecycle. Since `scripts/install.js` is running for two different phases, it would be wise in this case to look at the `npm_lifecycle_event` environment variable. |
| 292 | |
| 293 | If you want to run a make command, you can do so. This works just fine: |
| 294 | |
| 295 | ```json |
| 296 | { |
| 297 | "scripts": { |
| 298 | "preinstall": "./configure", |
| 299 | "install": "make && make install", |
| 300 | "test": "make test" |
| 301 | } |
| 302 | } |
| 303 | ``` |
| 304 | |
| 305 | ### Exiting |
| 306 | |
| 307 | Scripts are run by passing the line as a script argument to `/bin/sh` on POSIX systems or `cmd.exe` on Windows. You can control which shell is used by setting the [`script-shell`](/cli/v11/using-npm/config#script-shell) configuration option. |
| 308 | |
| 309 | If the script exits with a code other than 0, then this will abort the process. |
| 310 | |
| 311 | Note that these script files don't have to be Node.js or even JavaScript programs. They just have to be some kind of executable file. |
| 312 | |
| 313 | ### Best Practices |
| 314 | |
| 315 | - Don't exit with a non-zero error code unless you _really_ mean it. If the failure is minor or only will prevent some optional features, then it's better to just print a warning and exit successfully. |
| 316 | - Try not to use scripts to do what npm can do for you. Read through [`package.json`](/cli/v11/configuring-npm/package-json) to see all the things that you can specify and enable by simply describing your package appropriately. In general, this will lead to a more robust and consistent state. |
| 317 | - Inspect the env to determine where to put things. For instance, if the `npm_config_binroot` environment variable is set to `/home/user/bin`, then don't try to install executables into `/usr/local/bin`. The user probably set it up that way for a reason. |
| 318 | - Don't prefix your script commands with "sudo". If root permissions are required for some reason, then it'll fail with that error, and the user will sudo the npm command in question. |
| 319 | - Don't use `install`. Use a `.gyp` file for compilation, and `prepare` for anything else. You should almost never have to explicitly set a preinstall or install script. If you are doing this, please consider if there is another option. The only valid use of `install` or `preinstall` scripts is for compilation which must be done on the target architecture. |
| 320 | |
| 321 | ### See Also |
| 322 | |
| 323 | - [npm run](/cli/v11/commands/npm-run) |
| 324 | - [package.json](/cli/v11/configuring-npm/package-json) |
| 325 | - [npm developers](/cli/v11/using-npm/developers) |
| 326 | - [npm install](/cli/v11/commands/npm-install) |