Every published node now goes through review
Asking us to publish to npm now puts your node in a queue where a person reads it first. Downloading it yourself is unchanged and still instant.
Publishing to npm is the only irreversible thing this product does, so it now has a step in front of it. When you submit a node, it joins a review queue and a person looks at it before anything reaches the registry.
What changed for you
- Downloading is untouched. You can still build a node and install the package yourself, with no queue and nothing sent to us.
- Submitting shows a short checklist confirming you may use the API that way and that the node does what it says.
- Your test runs travel with the submission. The reviewer sees that you ran each action against the real API, and what came back.
That last point is the part we care about most. A node that has been run is a different claim from a node that merely parses, and the review is far more useful when the evidence arrives with it.
There is more on the reasoning, and on what the review deliberately does not promise, in why a person reads every node.