Security News > 2022 > May > SheetJS ditches npm registry over 2FA requirement and 'legal matters'
In a surprising move, the popular open source project, SheetJS aka "Xlsx," has dropped support for the npm registry.
The project's maintainer suggests that the decision to pull out of the npm registry is based on the newly introduced two-factor requirements for top projects, GitHub's abrupt decision-making, and ongoing 'legal matters' between SheetJS and npm.
On April 14th, maintainer of SheetJS introduced a code change removing any npm dependencies used by the project.
Any URL references to npm's domains within the SheetJS source code were also updated to use SheetJS CDN, as seen by BleepingComputer.
"Due to ongoing legal matters between SheetJS LLC and npm, Inc., it did not make sense to continue using the public npm registry for distribution," states the SheetJS developer.
BleepingComputer has reached out to GitHub and SheetJS to better understand what the legal matters entail.