Shrinkpack

shrinkpack is a command-line tool for making npm installs fast, resilient and reproducible. It points your package-lock.json at dependency tarballs that are checked into your project's repository, so you can install while offline, during a registry outage, or when a package disappears from the registry.

It reads package-lock.json or npm-shrinkwrap.json, downloads the exact archives npm would fetch from the registry, decompresses the .tgz files into .tar files to avoid storing binary blobs in Git, saves them in a node_shrinkpack folder and rewrites the lockfile to reference them. The rest of the install process is unchanged, but no network access is needed. You run it each time you change and install dependencies.

shrinkpack requires npm 7 or higher, is written in TypeScript and is released under the MIT license. Its topics mention yarn and pnpm, and the README includes a history from 2015 describing how it related to events such as the left-pad incident. It suits teams that need dependable CI builds independent of the public registry.