# GitHub adds npm as a token scanning partner

DevFeed: [GitHub adds npm as a token scanning partner](<https://devfeed.tech/articles/github-adds-npm-as-a-token-scanning-partner-74884.md>)

Original publisher: [Read original article](<https://github.blog/changelog/2019-06-18-github-adds-npm-as-a-token-scanning-partner>)

Author: Justin Hutchings

Published: 2019-06-18T16:00:29Z

Content type: release

Language: en

Sources: [GitHub Changelog](<https://devfeed.tech/sources/github-changelog.md>)

Topics: [GitHub](<https://devfeed.tech/topics/github.md>), [npm security](<https://devfeed.tech/topics/npm-security.md>), [Secure token management](<https://devfeed.tech/topics/secure-token-management.md>), [npm packages](<https://devfeed.tech/topics/npm-packages.md>)

Tags: [github](<https://devfeed.tech/tags/github.md>), [npm](<https://devfeed.tech/tags/npm.md>), [scanning](<https://devfeed.tech/tags/scanning.md>), [token](<https://devfeed.tech/tags/token.md>)

## AI overview

GitHub partnered with npm to scan for tokens and help prevent users from accidentally committing npm tokens to public repositories.

## Source excerpt

GitHub has partnered with npm for token scanning. This protects users from accidentally committing npm tokens into their public repositories. For more information on token scanning For more information on...