The npm error Unsupported URL Type "link:" has been fixed by removing local development dependencies from package.json.
cd /home/w4nn4d13/Project/OpenLearnX-ghsa-223g-f5mq-gw33
# Run the validation script (optional)
./test-npm-publish.shcd frontend
pwd
# Should show: /home/w4nn4d13/Project/OpenLearnX-ghsa-223g-f5mq-gw33/frontendnpm login
# Enter your credentials:
# - Username: th30d4y
# - Password: [your npm password]
# - Email: [your npm registered email]
# - OTP: [if 2FA enabled, provide code]
# Verify login
npm whoami # Should show: th30d4ynpm publish
# Expected output:
# npm notice
# npm notice 📦 @th30d4y/openlearnx@2.0.4
# npm notice filename: th30d4y-openlearnx-2.0.4.tgz
# npm notice published: [timestamp]
# npm notice public# Check on npm registry
npm view @th30d4y/openlearnx@2.0.4
# Or visit: https://www.npmjs.com/package/@th30d4y/openlearnxUsers can now install with:
npm install @th30d4y/openlearnx@2.0.4@th30d4y/openlearnx v2.0.4
├─ Security Fix: JWT Signature Verification (GHSA-223g-f5mq-gw33)
├─ Framework: Next.js 16.1.6 + React 19.2.5
├─ Features: Adaptive quizzes, AI recommendations, Code compilation
└─ Ready for production
| Issue | Solution |
|---|---|
npm ERR! code E401 |
Run npm login again |
npm ERR! 404 |
Package already published; increment version |
EUNSUPPORTEDPROTOCOL |
Already fixed in this version |
| No internet | Check connection before npm publish |
✅ Security
- JWT signature verification enabled
- Prevents token forgery attacks
- Closes account takeover vulnerability
✅ Package
- Removed local
link:dependencies - Now compatible with public NPM registry
- Clean, publishable package
✅ Documentation
- CHANGELOG.md added
- RELEASE_NOTES_v2.0.4.md added
- Publishing guides created
- Validation script included
- ✅ 8 commits with security fix
- ✅ Tag v2.0.4 created
- ✅ Branch advisory-fix-1 pushed
- ✅ Package validated
- ✅ Docs complete
Ready? Run:
cd frontend && npm login && npm publishGood luck! 🎉