DEV Community

npm

Node Package Manager

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Left-pad incident explained: how 11 lines of JavaScript broke npm
axrisi profile

Left-pad incident explained: how 11 lines of JavaScript broke npm

#javascript #npm #node #opensource
1
Comments
8 min read
We Blamed the Market for a Metric Our Own Clients Broke
minia2a profile

We Blamed the Market for a Metric Our Own Clients Broke

#npm #javascript #observability #programming
Comments
6 min read
yarn.lock: may the `--force` be with you
antongolub profile

yarn.lock: may the `--force` be with you

#javascript #security #npm #supplychain
1
Comments 1
14 min read
yarn.lock: you can't `sed` a graph
antongolub profile

yarn.lock: you can't `sed` a graph

#javascript #npm #supplychain #security
1
Comments 1
10 min read
CaptchaKit: A Self-Hosted CAPTCHA Package for React & Next.js + Try It Live
joodi profile

CaptchaKit: A Self-Hosted CAPTCHA Package for React & Next.js + Try It Live

#nextjs #react #npm #typescript
5
Comments
1 min read
express-validator
devalujeniya profile

express-validator

#express #backenddevelopment #javascript #npm
1
Comments
6 min read
None of the Big Package Registries Can Tell You If a Dependency Is Abandoned
ronin13 profile

None of the Big Package Registries Can Tell You If a Dependency Is Abandoned

#discuss #programming #opensource #npm
Comments 2
7 min read
AI Coding Assistants Invent Fake Packages 1 in 5 Times — Attackers Are Already Registering Them
trustboost profile

AI Coding Assistants Invent Fake Packages 1 in 5 Times — Attackers Are Already Registering Them

#security #ai #webdev #npm
Comments
2 min read
Modern Open-Source Maintenance: Secure Package Publishing, SemVer, and Automated Scanning
mtahir27 profile

Modern Open-Source Maintenance: Secure Package Publishing, SemVer, and Automated Scanning

#opensource #npm #securityscanning #semanticversioning
Comments
9 min read
Your npm install Is Doing More Than You Think
mridudixit15 profile

Your npm install Is Doing More Than You Think

#npm #javascript #programming #productivity
1
Comments 2
7 min read
A Supply-Chain Attack Hit Our Repos. Here's How We Locked Down GitHub So It Can't Happen Again
naum4n profile

A Supply-Chain Attack Hit Our Repos. Here's How We Locked Down GitHub So It Can't Happen Again

#github #devops #security #npm
Comments
3 min read
capsurface: reviewing capability changes in npm dependencies
0xvmartins profile

capsurface: reviewing capability changes in npm dependencies

#security #npm #javascript #node
1
Comments
5 min read
The Shai-Hulud npm worm showed that opening a folder is enough to run code
bianliang profile

The Shai-Hulud npm worm showed that opening a folder is enough to run code

#supplychain #npm #developertooling #credentialtheft
Comments
3 min read
Good News For Backend And Devops Buddy
nahid625 profile

Good News For Backend And Devops Buddy

#backend #devops #npm #devtool
Comments
2 min read
Caching VAT and FX Rates at Build Time, Not on the Request Path
iurii_rogulia profile

Caching VAT and FX Rates at Build Time, Not on the Request Path

#node #typescript #ecb #npm
Comments
8 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.