Hacker Newsnew | past | comments | ask | show | jobs | submitlogin
Classic npm tokens sunset due this month (github.blog)
6 points by jakub_g 24 days ago | hide | past | favorite | 1 comment


[September 29, 2025]

> Over the next five weeks, we will:

> Revoke all existing legacy classic tokens for npm publishers.

> Disable legacy classic token generation on npmjs.com permanently.

> If you use classic tokens for npm, you must immediately take the following actions:

> Generate new npm granular access tokens with appropriate scoped permissions.

> Update all automation, CI/CD pipelines, and local configurations.




Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: