# npmd-pack

> turn a directory into a tarball for npm.

Latest version **1.0.0** (published 2013-12-14) · MIT license · 0 weekly downloads

## Install

```sh
npm install npmd-pack
pnpm add npmd-pack
yarn add npmd-pack
bun add npmd-pack
```

## Health

**Score 15/100 (F)** — status: abandoned.

Positive: no vulnerabilities.

Warnings: low downloads; no types; no esm support.

Negative: abandoned; low maintenance score.

## Facts

| | |
|---|---|
| Version | 1.0.0 |
| Published | 2013-12-14 |
| First published | 2013-12-14 |
| Weekly downloads | 0 |
| License | MIT |
| TypeScript types | none |
| Module format | CommonJS |
| Dependencies | 2 |
| Known vulnerabilities | 0 (+17 in 1 direct dependencies) |
| Install scripts | no |
| GitHub stars | 3 |
| Author | Dominic Tarr <dominic.tarr@gmail.com> (dominictarr.com) |

## Links

- npm: https://www.npmjs.com/package/npmd-pack
- Repository: https://github.com/dominictarr/npmd-pack
- npm.io page: https://npm.io/package/npmd-pack

## Dependencies (2)

- [tar](https://npm.io/package/tar.md) ~0.1.19
- [fstream-npm](https://npm.io/package/fstream-npm.md) ~0.1.6

## Recent versions

- 1.0.0 (latest) — 2013-12-14

## README

# npmd-pack

Pack a directory into a tarball stream.

This code is mostly pulled out of npm and fstream-npm does most of the work.
The only departure from the way that npm does it is to always set the timestamps to 0.

This is important to security (and thus to distribution),
because it means it's possible to verify an installed package
by repacking it.
(although, this will unfortunately only be possible if packed with with npmd-pack)

## Example

``` js
var pack = require('npmd-pack')

pack(process.cwd(), {})
  .pipe(fs.createWriteStream('../tarball.tgz'))
```

`opts` are passed through to [tar](https://github.com/isaacs/node-tar)

## License

MIT

---
_Source: https://npm.io/package/npmd-pack · Machine-readable twin of the npm.io package page. Health data is recomputed on every publish._