Skip to content
RuleRoster

Source-backed platform rule

npm granular token package and scope limit

npm caps one granular token at a combined 50 packages and scopes and binds the token to its user's permissions.

RuleRoster is independent and is not affiliated with or endorsed by npm.

Direct answer

What is the rule?

One granular access token can access up to 50 packages and scopes combined—packages, scopes, or a mixture totaling 50—and cannot exceed its user's permissions. The reviewed source does not state an over-limit response or exception.

Scope
npm token limits, package visibility, and staged approval
Human verified
August 14, 2026
Source checked
September 3, 2026

Published evidence

Rule details

Package and scope access

One granular access token can access a combined total of up to 50 packages and scopes: packages, scopes, or a mixture totaling 50. Its permissions cannot exceed the user's permissions. The reviewed source does not state an over-limit response or exception.

Applicability

Service: npm. Rule group: access-token quotas. Scope: package and scope access for one granular access token. Policy version and effective dates: not stated.

Evidence trail

Official sources

Attribution and license

npm product documentation by GitHub, Copyright 2020 GitHub. Source: https://github.com/npm/documentation/tree/26eacbbb613ca0a6c68798b8754595f8e6019164. Licensed under Creative Commons Attribution 4.0 International: https://github.com/npm/documentation/blob/26eacbbb613ca0a6c68798b8754595f8e6019164/LICENSE. Modified by RuleRoster: RuleRoster extracted and restructured facts into typed rule fields and concise answers. Verified 2026-08-14. No endorsement by npm or GitHub is implied. The Creative Commons license does not license trademark or patent rights.

Interpretation and accountability

Before you act

  1. Confirm that the scope matches your case.
  2. Keep recommendations, enforced limits, exceptions, and unstated details distinct.
  3. Open the official source before relying on the rule for a consequential decision.

Record dates

Published
August 15, 2026
Human verified
August 14, 2026
Source checked
September 3, 2026
Review due
September 4, 2026

Challenge this record

If the source or summary appears wrong, submit precise evidence for human review.

Submit a correction