It has been brought to our attention that the usage of an automated bot to help us keep the npm cli up to date in the Node.js repo might be against the project's policies. With that in mind we (the @nodejs/npm team) would like to make sure we bring the issue over to the attention of the TSC in order to get an explicit approval for the usage of a bot that will automatically open PRs updating npm to its latest published version.

The goal here is to make sure the npm cli gets timely updates in the node repo while also reducing the amount of manual work required from both the npm team and node collaborators.

Related to the conversation started in one of the npm update PRs: #38831 (comment)

cc @aduh95