What changed
No action needed unless you validate responses against a closed schema.
Affects GET /v9/projects/{idOrName}.
Who is affected
Code that reads GET /v9/projects/{idOrName} (permissions.privateNpmUsage).
Before and after
| Where | Before | After |
|---|---|---|
| GET /v9/projects/{idOrName} · permissions.privateNpmUsage | absent | present |
| PATCH /v9/projects/{idOrName} · permissions.privateNpmUsage | absent | present |
| POST /v11/projects · permissions.privateNpmUsage | absent | present |
| POST /v1/projects/{idOrName}/avatar · permissions.privateNpmUsage | absent | present |
| DELETE /v1/projects/{idOrName}/avatar · permissions.privateNpmUsage | absent | present |
| PATCH /v1/projects/{projectId}/microfrontends · permissions.privateNpmUsage | absent | present |
Based on Vercel’s published API specification. How severity is decided.