deno package-management npm-compat tooling release

Deno 2.8 adds audit fix, pack, transpile commands

New CLI subcommands handle vulnerability patching, npm publishing, and TypeScript-to-JS conversion without leaving the Deno toolchain.

June 11, 2026

Summary

Reduces context-switching between tools: `deno audit fix` auto-patches npm deps, `deno pack` replaces tsc+npm-pack, and `deno transpile` strips types for JS-only artifacts. `deno ci` replaces flag memorization in CI pipelines. Default npm: prefix and 3.66x faster installs lower friction for Node projects migrating to Deno.

Why it matters

Implementation verdict

Ready now. `deno audit fix` replaces manual version bumping for semver-compatible patches; major upgrades require explicit decisions. `deno pack` replaces a tsc→npm-pack pipeline for JSR/Deno projects targeting npm. `deno transpile` is useful for pre-building TS or JS-only publishing but doesn't replace bundlers. Install 2.8, try `deno pack --dry-run` on existing projects first.

Sources

1.automatically upgrades affected packages to the nearest patched version that still satisfies your version constraints
2.deno pack rewrites specifiers so the published package works inside the npm ecosystem: jsr:@std/path becomes @jsr/std__path
3.installs 3.66x faster than 2.7 on a cold cache
4.deno ci errors if deno.lock is missing, removes any existing node_modules directory, and then runs the install with --frozen so the lockfile must match the config file exactly

Dev Signal

Get briefs like this in your inbox — free, 3x a week.

100+ sources compressed into one 4-minute read. Ranked, cited, implementation-ready.

Read the full issue →All briefs