DEV Community

npm

Node Package Manager

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
52,000 packages passed every security check. Chainguard blocked them anyway.
thegatewayguy profile

52,000 packages passed every security check. Chainguard blocked them anyway.

#security #npm #ai #devops
Comments
3 min read
A CVE just hit your base image. Your scanner won't tell you which repos to fix.
danielwe profile

A CVE just hit your base image. Your scanner won't tell you which repos to fix.

#docker #baseimage #cve #npm
Comments
11 min read
Deep Dive: TanStack npm supply-chain compromise
shrutikapoor08 profile

Deep Dive: TanStack npm supply-chain compromise

#githubactions #javascript #npm #security
1
Comments
3 min read
Building a CLI Tool with Node.js (From Zero to npm)
armorbreak profile

Building a CLI Tool with Node.js (From Zero to npm)

#cli #node #npm #tutorial
Comments
4 min read
I Built My Own Config Format for Node.js That Separates Server and Client Secrets
kanishq9 profile

I Built My Own Config Format for Node.js That Separates Server and Client Secrets

#node #npm #security #opensource
1
Comments 2
5 min read
Scanning npm Packages for Malware Before You Install, Without Running Them
pavelespitia profile

Scanning npm Packages for Malware Before You Install, Without Running Them

#security #javascript #npm #devops
Comments 2
6 min read
date-light: A 1.8KB Alternative to date-fns You Might Actually Like
flyingsquirrel0419 profile

date-light: A 1.8KB Alternative to date-fns You Might Actually Like

#javascript #typescript #npm #opensource
1
Comments 2
3 min read
Scarab Diagnostic Field Test #021 — pnpm Self-Upgrade No-Manifest Boundary
scarab-systems profile

Scarab Diagnostic Field Test #021 — pnpm Self-Upgrade No-Manifest Boundary

#discuss #ai #npm #devops
2
Comments
4 min read
The NPM Audit Trap: A Thursday Morning Tragedy
proco profile

The NPM Audit Trap: A Thursday Morning Tragedy

#webdev #node #npm
Comments
2 min read
Microsoft's npm Packages Got Backdoored. Again. And AI Agents Pulled the Trigger.
thegatewayguy profile

Microsoft's npm Packages Got Backdoored. Again. And AI Agents Pulled the Trigger.

#security #devops #npm #kubernetes
Comments
2 min read
Shipping archkit v0.1: a TypeScript Clean Architecture scaffolder built in one Claude Code session
alexrogovjs profile

Shipping archkit v0.1: a TypeScript Clean Architecture scaffolder built in one Claude Code session

#typescript #cleanarchitecture #npm #claudecode
Comments 1
7 min read
Hi all
ayushmahadik profile

Hi all

#showdev #design #npm #ui
Comments
1 min read
I Researched the Red Hat npm Incident — Here's What Every Developer Should Know
deviduttadas3 profile

I Researched the Red Hat npm Incident — Here's What Every Developer Should Know

#cybersecurity #javascript #npm #security
5
Comments
1 min read
Modern JavaScript Tooling Explained: npm, npx, pnpm, Yarn & Bun
srsoumyax11 profile

Modern JavaScript Tooling Explained: npm, npx, pnpm, Yarn & Bun

#javascript #node #npm #tooling
1
Comments
5 min read
guard-install now scans GitHub repos before you run them
nithindj192 profile

guard-install now scans GitHub repos before you run them

#npm #node #riskanalysis
Comments
1 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.