如何在不泄露代码的情况下将包发布到 npm

Question

I'm trying to publish package to npm but don't want that who using the package be able to see the code. How can I do this?

Answer 1

Since npm is pretty much used to distribute JavaScript+CSS files, there is nothing you can do about it. Your code is going to be seen by whoever uses it or executes it.

You might be able to mitigate this somehow by using minifiers or obfuscators though.

Answer 2

You can compile your code eg to dist folder and then run npm publish in the dist directory. Users then can see only what will be placed in the dist folder (compiled code). However, I think that this is not good practice.

You can also consider private npm packages to distribute your packages only to those who you want.