[TRIGGER] npm new release

[gilmeir-arnac]

Report to slack on new package (or scope) releases to npm.

https://docs.npmjs.com/cli/v10/commands/npm-hook
https://github.com/npm/registry/blob/main/docs/hooks/endpoints.md

[vunguyenhung]

Confirmed, no npm new release exists

Adding this to backlog

[jcortes]

Hi @gilmeir-arnac do you know by any change if the endpoint is working? because I'm not even getting any response by doing something like as an example:

curl -X POST 'https://registry.npmjs.org/-/npm/v1/hooks/hook/' \
-H 'Content-Type: application/json' \
-d '{
  "type": "package",
  "name": "react",
  "endpoint": "https://6a70ce29674a2fbe027ff18ebd5f6be5.m.pipedream.net",
  "secret": "fd752205-4f86-488c-9c08-a5d5e2a4e82d"
}'

and if I try to make a request using the component from Pipedream I get:

"status": 401,
"statusText": "Unauthorized",

cc @michelle0927 @vunguyenhung

in any case if you want to try the component is here #12149

By the way I also tried the suggestion in this PR npm/registry#31 and I got the following message in a html response

Sorry, you have been blocked
You are unable to access npmjs.com 

Why have I been blocked?
This website is using a security service to protect itself from online attacks. The action you just performed triggered the security solution. There are several actions that could trigger this block including submitting a certain word or phrase, a SQL command or malformed data.

What can I do to resolve this?
You can email the site owner to let them know you were blocked. Please include what you were doing when this page came up and the Cloudflare Ray ID found at the bottom of this page.
 Cloudflare Ray ID: 88b17f861a64884  Performance & security by Cloudflar

[michelle0927]

@jcortes I think the endpoints may require authentication with a username and password. https://github.com/npm/registry/blob/main/docs/user/authentication.md#how-to-authenticate

[jcortes]

Hi @michelle0927 I tried with basic auth and didn't work either

Update

Actually it worked with OTP number!

Seems like in order to make it work we need a paid individual or organizational npm account according to this blog https://blog.npmjs.org/post/145260155635/introducing-hooks-get-notifications-of-npm

If you have a paid individual or organizational npm account, you can start using hooks right now.

I've even tried with the CLI commands and didn't get any event notifications at all

cc @malexanderlim @gilmeir-arnac

[gilmeir-arnac]

@jcortes same here, that's why I was looking if pipedream has it 😉
Eventually I implemented it with periodic triggers in pipedream, it uses the datastore to cache the latest version it found and reported to slack.

with npm cli

npm view $PACKAGE_NAME@latest version

with node

import fetch from 'npm-registry-fetch';

const response = await fetch.json(`/${packageName}/latest`);
console.log(response.version);

You can lookup my project id proj_AVs3J6m.

[jcortes]

Hi @gilmeir-arnac can you send me the shared link via slack please? my username is @jcortes in any case