npm weekly #213: OSS Funding Platform, npm v6.11.3 released, open RFC meetings & more

npm announces plans to develop a funding platform for open source package maintainers [View this email in your browser]( [How Slack uses npm!]( Funding platform for OSS maintainers On Friday, npm, Inc. [announced development of a funding platform]( that will make it easy for users of open source packages to compensate package maintainers through the registry. [Learn more here]( and keep an eye out for more details coming soon! npm v6.11.3 is here Earlier this week, we released [npm@6.11.3](. This update contains bug fixes for npm ci and npm outdated --depth [Read the release notes ›]( To get it, run: npm install -g npm@latest Dependency management from a security point-of-view Adam {NAME}, npm's VP of Security, describes the do's and don'ts of dependency management in [a new blog post](. Open RFC meetings kickoff On Wednesday, the npm CLI team [kicked off the first of a series]( planned bi-weekly meetings ("fortnightly," if you prefer) to discuss issues and open pull requests in the [npm rfcs repository](. These meetings are open to all who wish to attend. [Follow us on Twitter]( for updates. Curious about what it would be like to work on a product with 11 million+ users and over 40 billion downloads every month? We are currently looking for engineers, security pros, design folks and more. See our open positions at: [npmjs.com/jobs](. Share your project! We love to feature projects created by customers and members of the npm community. If your team is using npm to build something cool, [let us know]( Registry terms of service updated The npm public [registry terms of service]( have been updated to clarify acceptable commercial content in the registry. Need private packages and team management tools? [Wombats stack boxes together using teamwork]( The same tools that empower developers to work together on Open Source projects can make teams more efficient when collaborating on mission-critical applications. [Learn how npm Orgs can help your team](. Copyright © 2019 npm, Inc., All rights reserved. You (or someone impersonating you) signed up for this email list on our site... but you can feel free to remove yourself at any time. Our mailing address is: npm, Inc. 1999 Harrison St. Ste 1150Oakland, CA 94612 [Add us to your address book]( [unsubscribe from this list]( [update subscription preferences]( [Share]( [Share]( [Tweet]( [Tweet]( [Share]( [Share](