{ "stagedVersions": { "whatever": "other", "metadata": "we wanna", "put": "here", "versions": { "1.2.3": { "manifest": "data..." }, "1.2.4": { "another": "staged manifest..." } } } }I don’t think it should be possible for anyone but an owner to install a staged build; and ideally with the restrictions Wes outlined. #799
Originally posted by @ljharb in https://github.com/npm/rfcs/issues/92#issuecomment-586609632