From 3296a3ad8c87bfdb8a635f158003b28f06436b6f Mon Sep 17 00:00:00 2001 From: Luke Banicevic <60857954+banaboi@users.noreply.github.com> Date: Fri, 24 Jul 2026 02:02:29 +1000 Subject: [PATCH] Docs: clarify there is no official npm package (impersonation/typosquat awareness) (#5299) --- .github/SECURITY.md | 8 ++++++++ docs/mkdocs/docs/integration/package_managers.md | 6 ++++++ 2 files changed, 14 insertions(+) diff --git a/.github/SECURITY.md b/.github/SECURITY.md index ea7e8810f..066cf1a2e 100644 --- a/.github/SECURITY.md +++ b/.github/SECURITY.md @@ -15,6 +15,14 @@ guidance. For vulnerabilities in third-party dependencies or modules, please report them directly to the respective maintainers. +## Unofficial packages + +This project does not publish an official npm package. The npm package +[`nlohmann-json`](https://www.npmjs.com/package/nlohmann-json) (or similarly named packages) is not maintained or +endorsed by this project. See the +[package managers documentation](https://json.nlohmann.me/integration/package_managers/#npm) for supported +integration options. + ## Additional Resources - Explore security-related topics and contribute to tools and projects through diff --git a/docs/mkdocs/docs/integration/package_managers.md b/docs/mkdocs/docs/integration/package_managers.md index 909720454..792a0fa5a 100644 --- a/docs/mkdocs/docs/integration/package_managers.md +++ b/docs/mkdocs/docs/integration/package_managers.md @@ -930,6 +930,12 @@ If you are using [CocoaPods](https://cocoapods.org), you can use the library by to your podfile (see [an example](https://bitbucket.org/benman/nlohmann_json-cocoapod/src/master/)). Please file issues [here](https://bitbucket.org/benman/nlohmann_json-cocoapod/issues?status=new&status=open). +## npm + +This project does not publish an official [npm](https://www.npmjs.com) package. The npm package +[`nlohmann-json`](https://www.npmjs.com/package/nlohmann-json) (or similarly named packages) is not maintained or +endorsed by this project. Use one of the package managers listed above, or integrate the single header directly. + ## ESP-IDF and PlatformIO There is no official package published to the [ESP-IDF Component Registry](https://components.espressif.com) or the