Specify private npm repo for scoped packages.

[loliver]

I've had a quick play around attempting to set this in .yarnrc and .npmrc but it appears the dependencies api call isn't parsing these when looking for a newly added dependency.

For example I ran npm config set @myco:registry http://reg.example.com (with correct details for our registry) but it's still looking at the official npm registry for @myco components.

[CompuIves]

Hmm, this is an interesting one. It should be possible if we add it as a config to the packager before we install, though we need to open an API to remember the custom registries per sandbox. I'll put it in the pipeline.

[angeliski]

Hey man, great job in the Codesandbox.
I would like that too

[jasonHzq]

Any progress on this?

[anyexinglu]

Any progress on this?

[garethx]

We'd be keen to know how you use private npm registries so that we can build an implementation that fits your needs. In particular, do you use a service for your private npm registries? (Like GitHub Package Registry) and do you host your npm registry within a VPN? Thanks

[loliver]

We use Artifactory to host npm registries inside a corporate firewall. I can't quite remember the exact details of what I was trying to accomplish at the time but our basic use-case is still the same.

I guess the main question is does Code Sandbox pull dependencies via the browser or the server. If it's the browser on the client machine then our own DNS would be able to point to the internal Artifactory but if it's the server then it's not possible to get our scenario to work.

[garethx]

We do both depending on the sandbox type, but we hope to be able to support client-side downloading for all types as we tackle this.

[donovanclarke]

@garethx I had a question about this. we currently have a set of private scoped packages that are on NPM. Is there anyway to access these via codesandbox?

[garethx]

@donovanclarke No, that will be covered as part of this work.

[roddds]

We use cloudsmith as the private registry, with credentials/settings stored in .npmrc, no VPN needed:

always-auth=true
@myco:registry=https://npm.cloudsmith.io/myco/npm/
//npm.cloudsmith.io/myco/npm/:_authToken=AuThToKeNhErE

[idbartosz]

In our company we use Nexus Repository to manage packages but it's accessible only via VPN. Nexus acts as proxy for public NPM packages and host for our private ones.

Our .npmrc looks similar to this one:

registry=http://nexus.my.co/repository/npm-frontend/
always-auth=true
email=frontend@my.co
_auth=AuThToKeN(=

[CompuIves]

We're now finally working full-time on this, but we'd love to have your input so we can make sure that we cover all cases. If you're interested in helping us with this, could you send an email to ives@codesandbox.io and state how you use private npm packages?

We're interested in:

1. Do you self-host your registry?
2. Are you okay with setting CORS headers on the registry?
3. Is your registry only available through a CDN?

[MuYunyun]

It's cool and I can't wait to see it.

[github-actions[bot]]

This issue has automatically been marked stale because there has been no activity in a while. Please leave a comment if the issue has not been resolved, or if it is not stale for any other reason. After 2 weeks, this issue will automatically be closed, unless a comment is made or the stale label is removed.

[roddds]

The issue has not been resolved? 😅

[iloveip]

Are there any updates on this? I would also like to use private packages with codesandbox.

[garethx]

This is now available to pilot users. Docs are here: https://codesandbox.io/docs/custom-npm-registry and you can register to join the pilot here: https://airtable.com/shrlgLSJWiX8rYqyG

[pawel-tomkowski]

@garethx
I joined into pilot on Friday, when I will be able to manage private npm registry on settings page? ( I have pro plan). Thanks in advance.

[garethx]

@vaalgrind I'll include you in the next cohort - will go out later this week. Thanks.

[SaraVieira]

Hey everyone!

I converted it to a discussion as the feature has been released but I am sure there will be more questions 👍

[pcattori]

Is this feature still only available to those who've signed up as pilot users via https://airtable.com/shrlgLSJWiX8rYqyG ? Or can anyone with CodeSandbox Pro now use private NPM registries?

[garethx]

It's available to everyone as part of the Team Pro plan, see https://codesandbox.io/pricing

[pcattori]

@garethx , thank you! If I have the Team Pro plan and am having issues pulling in my private package from my private registry after following these instructions, where is the best place to go with questions / requests for help?

[garethx]

I saw your recent in-app support request for this, this morning. It has been assigned to an engineer and they'll be in touch with specifics soon.

[davo]

FYI: You can find the the instructions for setting a custom NPM registry on the upgraded docs Using a Custom NPM Registry can.