Gist for "npm authoring basics" - https://nec.is/writing/npm-authoring-basics/

deprecate.sh

  # deprecate a single version
  npm deprecate [email protected] "this version is not supported any more, pelase update"

  # deprecate everything below a version
  # mind the double-qoutes around the version information!
  npm deprecate my-module@"< 1.0.4" "critical bug fixed in 1.0.4, please update"

deprecate_warn.sh

$ npm i [email protected]
npm http fetch GET 200 http://registry.npmjs.org/my-module 760ms
npm WARN deprecated [email protected]: critical bug fixed in 1.0.4, please update

package-files.json

{
  "files": [
    "dist",
    "src"
  ]
}

package-scripts.json

{
  "scripts": {

    // using babel as a global module or local dependency,
    // exits with an error if the host hasn't installed depdencies or installed babel as global
    "babel": "babel src --out dist",

    // using babel as a local dependency
    // works even if there is no global babel installed
    "babel": "./node_modules/babel-cli/bin/babel src --out dist"

    // using npx
    // same as the previous one, but much shorter, nicer and readable
    "babel": "npx babel src --out dist"
    
  }
}

package-targets.json

{
  // your module compiled to commonJS
  "main": "dist/module.js"

  "browser": {
    // use a request-like module based on Fetch in the browser
    "request": "./shims/request-with-fetch.js",

    // basically this happens
    "code-for-node.js": "code-for-browser.js"
  },

  // your code in ES Modules format
  "module": "esm/module.js"
}

package_lifecycle.json

{
  "scripts": {
    // these can be ran outside the 'run' command
    "start": "",
    "stop": "",
    "test": "",

    // these are accessibe via 'npm run ...'
    "build": "",
    "clean": "",

    // these run before or after the scripts they are bound to by name
    "prebuild": "",
    "preclean": "",
    "postclean": "",
  }
}

scoped_package.sh

  # log in to an org
  npm login --scope=@myorg

  # init an npm project within a scope/org
  npm init --scope=myorg

  # publish a scoped, and public package
  npm publish --access=public