DEV Community

npm

Node Package Manager

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Khmer Hybrid Calendar v1.1.0 Released — Complete Holidays, UNESCO Heritage & 10x Faster 🚀
hengloem profile

Khmer Hybrid Calendar v1.1.0 Released — Complete Holidays, UNESCO Heritage & 10x Faster 🚀

#javascript #typescript #npm #opensource
Comments
2 min read
Mitigating Security Risks from Malicious npm Packages Through Enhanced Vetting and Monitoring
pavkode profile

Mitigating Security Risks from Malicious npm Packages Through Enhanced Vetting and Monitoring

#npm #security #malware #malfilter
Comments
13 min read
We Blamed the Market for a Metric Our Own Clients Broke
minia2a profile

We Blamed the Market for a Metric Our Own Clients Broke

#npm #javascript #observability #programming
Comments
6 min read
yarn.lock: may the `--force` be with you
antongolub profile

yarn.lock: may the `--force` be with you

#javascript #security #npm #supplychain
1
Comments 1
14 min read
yarn.lock: you can't `sed` a graph
antongolub profile

yarn.lock: you can't `sed` a graph

#javascript #npm #supplychain #security
1
Comments 1
10 min read
CaptchaKit: A Self-Hosted CAPTCHA Package for React & Next.js + Try It Live
joodi profile

CaptchaKit: A Self-Hosted CAPTCHA Package for React & Next.js + Try It Live

#nextjs #react #npm #typescript
5
Comments
1 min read
express-validator
devalujeniya profile

express-validator

#express #backenddevelopment #javascript #npm
1
Comments
6 min read
None of the Big Package Registries Can Tell You If a Dependency Is Abandoned
ronin13 profile

None of the Big Package Registries Can Tell You If a Dependency Is Abandoned

#discuss #programming #opensource #npm
Comments 2
7 min read
AI Coding Assistants Invent Fake Packages 1 in 5 Times — Attackers Are Already Registering Them
trustboost profile

AI Coding Assistants Invent Fake Packages 1 in 5 Times — Attackers Are Already Registering Them

#security #ai #webdev #npm
Comments
2 min read
Modern Open-Source Maintenance: Secure Package Publishing, SemVer, and Automated Scanning
mtahir27 profile

Modern Open-Source Maintenance: Secure Package Publishing, SemVer, and Automated Scanning

#opensource #npm #securityscanning #semanticversioning
Comments
9 min read
Your npm install Is Doing More Than You Think
mridudixit15 profile

Your npm install Is Doing More Than You Think

#npm #javascript #programming #productivity
1
Comments 2
7 min read
A Supply-Chain Attack Hit Our Repos. Here's How We Locked Down GitHub So It Can't Happen Again
naum4n profile

A Supply-Chain Attack Hit Our Repos. Here's How We Locked Down GitHub So It Can't Happen Again

#github #devops #security #npm
Comments
3 min read
capsurface: reviewing capability changes in npm dependencies
0xvmartins profile

capsurface: reviewing capability changes in npm dependencies

#security #npm #javascript #node
1
Comments
5 min read
Left-pad incident explained: how 11 lines of JavaScript broke npm
axrisi profile

Left-pad incident explained: how 11 lines of JavaScript broke npm

#javascript #npm #node #opensource
5
Picked as gem Comments
8 min read
The Shai-Hulud npm worm showed that opening a folder is enough to run code
bianliang profile

The Shai-Hulud npm worm showed that opening a folder is enough to run code

#supplychain #npm #developertooling #credentialtheft
Comments
3 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.