npm & package.json

npm (Node Package Manager) is installed with Node. It: • downloads packages from the npm registry into node_modules, • records them in package.json, • locks exact versions in package-lock.json, • runs project scripts (npm run dev).

npm init -y creates a package.json; npm install express adds a dependency; npm install -D vitest adds a development-only dependency.