Clean recipient test generator
Generate an isolated npm install check with a fresh cache, exact package version and read-only credential placeholder.
Runs in your browser. Inputs stay on this page and are cleared when you reload. No uploads, analytics or session replay. Use placeholders instead of real secrets.
Enable JavaScript to run this local tool, or follow the step-by-step guide.
Your result
Choose your inputs, then run the tool.
Verify delivery with recipient access
The generated script uses a new temporary project, a fresh npm cache and isolated user/global configuration. It installs an exact version with lifecycle scripts disabled, then resolves its local installed manifest. Use a read-only credential supplied through your secret store.
This checks a download, not the package's exported API. Add an application-specific import and assertion afterwards. Packages that need an install script can require a separate trusted test. npm 11 is the target; use a trusted temporary directory and a POSIX shell or PowerShell as selected.
The test deliberately stops if existing npm config environment overrides could contaminate it. Registry access, network access, npm policy and the recipient's permissions determine the actual result.
Continue with Publish and install your first package or explore all developer tools.