npm Community Forum (Archive)

The npm community forum has been discontinued.

To discuss usage of npm, visit the GitHub Support Community.

Advisory event dates

I’m analyzing NPM advisory data and am confused at what the different advisory events are.

As far as I can tell, there are 4 events: {“published”, “reported”, “updated”, “access”}

My assumption was that “reported” would always be the first event, but there are multiple examples, like https://www.npmjs.com/advisories/21, where the “reported” event comes after “published”.

Is there a data dictionary or other reference I can use to see what these event types mean?