DEV Community

npm

Node Package Manager

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
AI Coding Assistants Invent Fake Packages 1 in 5 Times — Attackers Are Already Registering Them
trustboost profile

AI Coding Assistants Invent Fake Packages 1 in 5 Times — Attackers Are Already Registering Them

#security #ai #webdev #npm
Comments
2 min read
Modern Open-Source Maintenance: Secure Package Publishing, SemVer, and Automated Scanning
mtahir27 profile

Modern Open-Source Maintenance: Secure Package Publishing, SemVer, and Automated Scanning

#opensource #npm #securityscanning #semanticversioning
Comments
9 min read
A Supply-Chain Attack Hit Our Repos. Here's How We Locked Down GitHub So It Can't Happen Again
naum4n profile

A Supply-Chain Attack Hit Our Repos. Here's How We Locked Down GitHub So It Can't Happen Again

#github #devops #security #npm
Comments
3 min read
capsurface: reviewing capability changes in npm dependencies
0xvmartins profile

capsurface: reviewing capability changes in npm dependencies

#security #npm #javascript #node
1
Comments
5 min read
Is that free data grid free for your project? Checks you can run in a terminal
kanunilabs profile

Is that free data grid free for your project? Checks you can run in a terminal

#javascript #npm #react #webdev
1
Comments
4 min read
The Shai-Hulud npm worm showed that opening a folder is enough to run code
bianliang profile

The Shai-Hulud npm worm showed that opening a folder is enough to run code

#supplychain #npm #developertooling #credentialtheft
Comments
3 min read
Good News For Backend And Devops Buddy
nahid625 profile

Good News For Backend And Devops Buddy

#backend #devops #npm #devtool
Comments
2 min read
Caching VAT and FX Rates at Build Time, Not on the Request Path
iurii_rogulia profile

Caching VAT and FX Rates at Build Time, Not on the Request Path

#node #typescript #ecb #npm
Comments
8 min read
What a Job Take-Home Taught Me About npm Supply-Chain Attacks
navalsaini27 profile

What a Job Take-Home Taught Me About npm Supply-Chain Attacks

#security #npm #javascript #cybersecurity
Comments 1
3 min read
Deno 2.6's minimum dependency age flag ignores year and month durations

Real-world tests reveal a silent CLI bug
alexgeorgiev17 profile

Deno 2.6's minimum dependency age flag ignores year and month durations

#deno #javascript #security #npm
12
Comments 6
8 min read
Navigating npm ERESOLVE Errors: A Strategic Guide for Engineering Leaders
devactivity profile
Oleg

Navigating npm ERESOLVE Errors: A Strategic Guide for Engineering Leaders

#npm #node #javascript #dependencymanagement
Comments
5 min read
How I Choose a Library Before Adding It to a Project
sashadudkina5 profile

How I Choose a Library Before Adding It to a Project

#frontend #webdev #beginners #npm
2
Comments
7 min read
An AI impersonated me
banana_cool profile

An AI impersonated me

#ai #npm #git
1
Comments
2 min read
Why we moved our Backstage platform from Yarn to pnpm
bogdan_nechyporenko profile

Why we moved our Backstage platform from Yarn to pnpm

#backstage #npm #devops #productivity
Comments
12 min read
Stop installing 6 security packages for every Node API
hopesf profile

Stop installing 6 security packages for every Node API

#node #npm #javascript #typescript
Comments
1 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.