Check if a npm username is taken

What we check on npm

Standard tier - checked on every full lookup

npm is checked from a username. The response says whether that handle exists on npm - registered: true or registered: false - with the moment that was established in checkedAt. An email address on its own cannot reach npm; if you only have an email, its local part is tried as a handle and any hit is labelled as derived, never counted as a confirmed match.

npm is checked on every full lookup (?wait=true or streaming), alongside every other platform. It is not in the sub-second instant subset, which is reserved for the highest-value platforms for each input type.

If npm blocks the check, times out, or answers ambiguously, it is omitted from results[] entirely rather than returned as registered: false. Absence from the response means "unconfirmed", never "no account".

Who checks npm accounts

Developer accounts are checked by SaaS, cloud and API businesses that give away free trials, credits or compute. A real developer usually has years of history on code hosting and developer communities; an address that exists nowhere in that world, signing up for free GPU hours, is a classic trial-abuse pattern.

More on this: Signup fraud prevention.

Inputs npm accepts

• Username: send the handle as query. npm is checked for that exact handle - useful when a person reuses the same name across platforms.

One request

curl -X POST "https://api.digifootprint.dev/v2/lookup?wait=true" \
  -H "Authorization: Bearer dfp_your_key" \
  -H "Content-Type: application/json" \
  -d '{"query": "someuser"}'

What a npm result looks like

{
  "platform": "npm",
  "registered": true,
  "checkedAt": "2026-10-15T09:53:18.889Z",
  "identity": "username"
}

The full response shape - breaches, web mentions, matches versus socialMatches, and what method means - is in running a lookup.

Related platforms

Every one of these is checked in the same request as npm.

More developer platforms: Pastebin, CodePen, GitLab, Codecademy, Kaggle, Hacker News · all developer

npm lookup FAQ

Can I check a phone number on npm?

Not directly. npm can be reached from username. Phone numbers are checked on the messaging and social apps that sign people up by phone.

How fast is a npm check?

npm is checked on a full lookup, which streams results as they land - the first matches arrive in around 60 milliseconds and the whole set typically completes in a few seconds.

What happens if npm blocks the check?

npm is left out of the response. We never report a platform we could not confirm as "not registered" - a missing platform means unconfirmed, not absent.

Does the API return the npm account details?

No. You get whether an account exists for the input you sent, and when that was established. No profile contents, photos, followers or private data are collected or returned.