Import packages from external registries in Postman

Importing external packages is available with Postman Free, Basic, and Professional teams.

You can import public packages from external package registries into your scripts. Postman supports importing packages from npm or JSR registries into pre-request scripts and post-response scripts in HTTP collections. You can import public external packages in your internal, partner, and public workspaces.

External packages aren't supported in Monitors, the Postman CLI, or Newman. You can use external packages in the Collection Runner and Postman Flows.

Import an external package

You can search for public external packages in npm and JSR and import them directly into your HTTP collections.

Private packages aren't supported.

To search and import an external package, do the following:

1. Select Packages at the lower right of the code editor.
2. Search for a package in npm or JSR. To filter your search results by package registry, select NPM, JSR, or both. Search returns the top five results for each package registry. Learn about supported public packages in Postman.
3. Select a package to import it into the code editor. To learn more about a package, hover over the package and select View in NPM or View in JSR.

To view all packages imported in your request's script, select Packages at the lower right of the code editor. Packages with a blue checkmark are imported in your script.

When you import an external package into the code editor, a JavaScript variable is declared that you can use to call functions and objects in packages. By default, the variable identifier is based on the external package name. The variable's value is the pm.require method with the package registry, name, and latest version number as the argument in the following format: registry-name:package-name@version-number. When your team members and consumers run the request, it will always use the package version defined in the argument.

// package imported from npm
const npmVariableName = pm.require('npm:package-name@version-number');

npmVariableName.functionName()

// package imported from jsr
const jsrVariableName = pm.require('jsr:package-name@version-number');

jsrVariableName.functionName()

You must use the exact version number in the argument. Postman doesn't support other ways to specify a version, such as version ranges or tags.

You can omit the version number (@version-number) from the argument to use the latest package version in all of your scripts.

Import an external package with the latest version

When you import a public external package, you can configure the argument so the latest package version is used in all of your scripts. To do this, omit the version number (@version-number) from the pm.require method's argument. Scripts will use the latest version number available when they first opened or ran the request that uses the package without a version number.

Each script in your Postman app that imports the package without a version number will use the same version. The package version is specific to your Postman app, meaning the version may differ for your collaborators.

To update a package to use the latest version in your Postman app, do the following:

1. Select Packages at the lower right of the code editor.
2. Hover over the imported package, and select Update to latest version. The version number is updated in each of your scripts that import the package without specifying a version number.

Supported external packages

Postman runs scripts in a sandbox environment that's secure by default. There are strict measures in place to ensure external code that runs inside the sandbox environment doesn't get extra privileges or access. Because of this, there may be some limitations when running the contents of external packages in the sandbox environment, depending on the package's dependencies.

Consider the following when importing external packages into Postman:

• Postman's sandbox environment runs code uniformly, regardless of whether the code runs on the browser or Node.js. External packages that use Nodes.js built-in modules may not work as expected in Postman because the modules aren't also available in the browser.

• Postman doesn't support all of JavaScript's standard built-in objects. Learn about the JavaScript objects Postman supports.

• Packages and their dependencies that exceed 50 MB aren't supported.

• Packages that use the await keyword outside of an async function aren't supported.

• Packages that use both named and default exports must use specific syntax to access the default exports:

  // access default exports
  const fooDefaultExport = pm.require("npm:foo").default
  
  // access named exports
  const { fooNamedExport } = pm.require("npm:foo")