DEV Community

npm

Node Package Manager

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Rust Was Crashing. Go Fixed It. Copilot Showed Me Why

GitHub “Finish-Up-A-Thon” Challenge Submission

Rust Was Crashing. Go Fixed It. Copilot Showed Me Why

5
Comments
4 min read
From pnpm's Cool Feature to npm's Life jacket: The (somewhat accidental) birth of age-install

From pnpm's Cool Feature to npm's Life jacket: The (somewhat accidental) birth of age-install

Comments
6 min read
Malicious npm Packages With Valid SLSA Provenance: Inside the TanStack Attack

Malicious npm Packages With Valid SLSA Provenance: Inside the TanStack Attack

1
Comments 2
5 min read
npm installs packages blindly — I built a CLI to fix that

npm installs packages blindly — I built a CLI to fix that

Comments
1 min read
Add a 50x+ faster duplicate-code gate to GitHub Actions with jscpd-rs

Add a 50x+ faster duplicate-code gate to GitHub Actions with jscpd-rs

3
Comments
5 min read
Four MCP packages, four ways the supply chain shifted in two weeks of npm monitoring

Four MCP packages, four ways the supply chain shifted in two weeks of npm monitoring

Comments
7 min read
Hardening npm dependency security

Hardening npm dependency security

Comments
4 min read
I built typecraft-cli: An AI tool that automatically catches missing TypeScript types

I built typecraft-cli: An AI tool that automatically catches missing TypeScript types

1
Comments
2 min read
npm Scripts You're Probably Not Using (But Should Be)

npm Scripts You're Probably Not Using (But Should Be)

1
Comments
1 min read
The 5.2 kB editor I had to write because nothing else fit

The 5.2 kB editor I had to write because nothing else fit

2
Comments
5 min read
I Built a 8.7KB React Animation Library (120+ FPS) on top of GSAP

I Built a 8.7KB React Animation Library (120+ FPS) on top of GSAP

3
Comments
1 min read
We analysed 396 breaking dependency releases. Here's what they have in common.

GitHub “Finish-Up-A-Thon” Challenge Submission

We analysed 396 breaking dependency releases. Here's what they have in common.

Comments
3 min read
AI Hallucinated Dependencies Are the New Supply Chain Attack: How to Stop Them

AI Hallucinated Dependencies Are the New Supply Chain Attack: How to Stop Them

Comments
8 min read
When GitHub Actions Goes Silent: The Pending-Forever Bug I Hit Shipping My MCP Server to npm

When GitHub Actions Goes Silent: The Pending-Forever Bug I Hit Shipping My MCP Server to npm

Comments
5 min read
`npm fund`

`npm fund`

1
Comments
1 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.