Microsoft plans to integrate npm with GitHub following acquisition
The JavaScript platform will undergo a host of improvements, with the community given a stronger voice
GitHub has signed an agreement to acquire widely-used JavaScript platform npm, with parent company Microsoft eventually hoping to integrate the newly bought company into GitHub in the longer-term.
Considered an essential part of the JavaScript ecosystem, the npm package manager is home to 1.3 million packages and sustains 75 billion downloads per month. The platform will be integrated into the GitHub development platform, which Microsoft took under its ownership in 2018.
RELATED RESOURCE
Three keys to maximise application migration and modernisation success
Harness the benefits that modernised applications can offer
The firm is planning to invest in the registry infrastructure and wider platform, with investments made to ensure it’s fast, reliable and scalable.
Microsoft will moreover, improve the core experience for developers while retaining npm’s open-source status. Additional features, such as Workspaces and improvements to multi-factor authentication (MFA) processes, will be developed with time.
Finally, the company wants to actively engage with the JavaScript community so the views of developers can be fed into future builds of npm.
“The amazing energy and creativity of millions of JavaScript developers is evident every day in the work that appears in npm,” said GitHub chief executive Nat Friedman. “We are honored to support that community in a new way. The future of npm and the JavaScript ecosystem is very bright.”
The eventual goal is to integrate GitHub and npm to improve the security of the wider open-source software supply chain, the company said. Users in future would be able to trace a change from a GitHub pull request to the npm package version that fixed it.
Sign up today and you will receive a free copy of our Future Focus 2026 report - the leading resource for IT decision-maker insight on priorities and investment areas in AI, security and more.
Friedman added users who use npm Pro, Teams and Enterprise to host private registries will continue to be supported under the GitHub-npm umbrella. The firm says it’ll invest heavily in packages so it serves as a wide-ranging multi-language that’s fully integrated with GitHub.
Later in 2020, Microsoft will allow npm’s paying customers to move their private npm packages to GitHub packages, with an exclusive focus on ramping up the public registry for JavaScript.
The move to integrate the JavaScript platform signals the extent to which Microsoft is aiming to build GitHub into an all-encompassing hub for developers and coders.
JavaScript has long been considered to be one of the most popular coding languages. Despite the rise of newer languages like Python, MDM and Kotlin, JavaScript was still found to be the most popular language for businesses, according to research from 2019.

Keumars Afifi-Sabet is a writer and editor that specialises in public sector, cyber security, and cloud computing. He first joined ITPro as a staff writer in April 2018 and eventually became its Features Editor. Although a regular contributor to other tech sites in the past, these days you will find Keumars on LiveScience, where he runs its Technology section.
-
Shifting from traditional MDR to an AI-powered agentic SOCAs autonomous threats proliferate, relying on standalone AI tools is a major business risk. Here is how Arctic Wolf is setting the market standard to solve the AI trust problem
-
Tokenmaxxing means FinOps is more important than everNews With firms facing surging AI bills, FinOps techniques are more important than ever
-
Amazon targets agent safety gains with investment in team behind Lean programming languageNews The tech giant hopes support for the open source programming language could drive AI agent safety improvements
-
‘The challenge now is making sure the next generation develops those same foundations before relying too heavily on AI’: Devs are swerving fundamental skills like Git and Agile because of AI – but there’s a good reasonNews O'Reilly has recorded a massive fall in programming fundamentals courses, but that’s not to suggest devs aren’t learning key skills
-
Everything you need to know about the GitHub Copilot pricing changesNews GitHub Copilot pricing changes mean users will be charged based on consumption, rather than a set number of credits
-
Four things you need to know about GitHub's AI model training policy – including how to opt outNews Users of certain GitHub Copilot plans will have interaction data used to train AI models, but can opt out
-
Big tech is clamping down on open source ‘AI slop’ reportsNews Firms including Microsoft, OpenAI, and Google have pledged funding to bolster open source security and cut down on slop reports
-
Anthropic says Claude Code can help streamline 'cost-prohibitive' COBOL modernization, but IBM says it's not that simple – 'decades of hardware-software integration cannot be replicated by moving code'News Research from Anthropic claims Claude Code can simplify modernization of COBOL systems
-
Microsoft is shaking up GitHub in preparation for a battle with AI coding rivalsNews The tech giant is bracing itself for a looming battle in the AI coding space
-
‘1 engineer, 1 month, 1 million lines of code’: Microsoft wants to replace C and C++ code with Rust by 2030 – but a senior engineer insists the company has no plans on using AI to rewrite Windows source codeNews Windows won’t be rewritten in Rust using AI, according to a senior Microsoft engineer, but the company still has bold plans for embracing the popular programming language