@bcherny: Guessing you're looking at npm-only data. We switched to a native installer a few months back, so the majority of insta…
Summary
An Anthropic developer corrects Andreessen Horowitz's usage metrics for Claude Code, noting that a switch to a native installer means npm data underreports actual adoption, with recent signup days showing significant growth.
View Cached Full Text
Cached at: 05/09/26, 08:15 PM
@a16z 👋 Guessing you’re looking at npm-only data. We switched to a native installer a few months back, so the majority of installs aren’t captured here.
Thursday was the second-highest Claude Code signup day we’ve ever had (15x growth since Jan 1). Ask Claude to debug your SQL?
Similar Articles
Features everyone should steal from npmx
npmx is an MIT-licensed alternative web frontend for the npm registry that adds security and usability features—like transitive install sizes, install-script disclosure, and outdated/vulnerable-dependency trees—spurring npmjs.com to finally ship dark mode.
@a16z: Codex installs spiked last week Charts of the Week: https://a16z.news/p/charts-of-the-week-it-was-a-good…
a16z's Charts of the Week highlights a surge in Codex installs and analyzes how hyperscalers like Amazon and Google are generating massive 'other income' through tech investments, notably in Anthropic.
Staged publishing and new install-time controls for npm
npm introduces staged publishing, requiring human approval via 2FA for package releases, and new `--allow-*` flags (file, remote, directory) to control install sources, improving supply-chain security in npm CLI 11.15.0.
Show HN: Safe-install – safer NPM installs with trusted build dependencies
A new npm package called safe-install is introduced to enhance supply chain security by allowing developers to disable install scripts by default and block exotic sub-dependencies, addressing ongoing vulnerabilities.
@RhysSullivan: just enabled a minimum age on npm package installs for my machine, should've done this sooner but if you haven't either…
A developer shares a tip to configure a minimum release age for package installs to mitigate supply-chain attacks.