rewindex

CompaniesnpmIncidents

npm: "fs" unpublished and restored

No impact listedStatus: resolvedStarted Resolved (0 min)1 updatestatus.npmjs.org (opens in new tab)

Timeline of updates

  1. resolved

    For a few minutes today the package "fs" was unpublished from the registry in response to a user report that it was spam. It has been restored. This was a human error on my (@seldo's) part; I failed to properly follow our written internal process for checking if an unpublish is safe. My apologies to the users and builds we disrupted. More detail: the "fs" package is a non-functional package. It simply logs the word "I am fs" and exits. There is no reason it should be included in any modules. However, something like 1000 packages do mistakenly depend on "fs", probably because they were trying to use a built-in node module called "fs". Given this, we should have deprecated the module instead of unpublishing it, and this is what our existing process says we should do. If any of your modules are depending on "fs", you can safely remove it from your dependencies, and you should. But if you don't, things will continue to work indefinitely.

From npm’s published incident history: for incidents before Rewindex began polling this status page, only the final update text is available.

Archive proof

Rewindex commits each version of an incident it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert.

How the archive is checked, and what it cannot prove.

This incident predates live tracking (October 17, 2026). It came from the vendor’s own published history, which is not covered by checkpoints.

Impact, status and times are the vendor’s own, as last archived. View on status.npmjs.org (opens in new tab).

Cite this

Status incident (vendor impact label: none) posted by npm, started 2016-08-23 20:34 UTC, resolved after 0 min, 1 update(s).

Title
"fs" unpublished and restored
Vendor
npm
Date
URL
https://rewindex.com/company/npm/incidents/dw8cr1lwxkcr

npm profileRecent npm incidentsAll outages on August 23, 2016npm in August 2016MarkdownJSON