Skip to content
Navigation menu
Search
Powered by Algolia
Search
Log in
Create account
DEV Community
Close
npm
Node Package Manager
Follow
Hide
Posts
Left menu
đź‘‹
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
Right menu
Dependabot's 3-Day Cooldown: Why Waiting Is Now Safer
Induwara Ashinsana
Induwara Ashinsana
Induwara Ashinsana
Follow
Jul 24
Dependabot's 3-Day Cooldown: Why Waiting Is Now Safer
#
supplychainsecurity
#
dependabot
#
npm
Comments
Add Comment
4 min read
npm Dependencies: How to Evaluate a Library Before It Hits Production
Juan Torchia
Juan Torchia
Juan Torchia
Follow
Jul 28
npm Dependencies: How to Evaluate a Library Before It Hits Production
#
english
#
typescript
#
pnpm
#
npm
1
 reaction
Comments
Add Comment
7 min read
I Ported python-semanticversion to Rust in 72 Hours: What Broke, How I Proved Parity, and the 6-Hour Edge Case
Pranav Gupta
Pranav Gupta
Pranav Gupta
Follow
Aug 5
I Ported python-semanticversion to Rust in 72 Hours: What Broke, How I Proved Parity, and the 6-Hour Edge Case
#
rust
#
python
#
hackathon
#
npm
1
 reaction
Comments
Add Comment
5 min read
My 4KB React package was installing 116 dependencies. Here's what I found when I audited it.
Saad Ahmad
Saad Ahmad
Saad Ahmad
Follow
Aug 24
My 4KB React package was installing 116 dependencies. Here's what I found when I audited it.
#
javascript
#
react
#
npm
#
webdev
3
 reactions
Comments
1
 comment
5 min read
The npm worm that shipped with valid SLSA provenance
Leo
Leo
Leo
Follow
Jul 22
The npm worm that shipped with valid SLSA provenance
#
supplychainsecurity
#
slsa
#
provenance
#
npm
Comments
Add Comment
4 min read
I got tired of mocking Date, so I built a TimeProvider for JavaScript / TypeScript
jaenyf
jaenyf
jaenyf
Follow
Aug 4
I got tired of mocking Date, so I built a TimeProvider for JavaScript / TypeScript
#
javascript
#
typescript
#
npm
#
node
1
 reaction
Comments
Add Comment
2 min read
A Typosquat Package Almost Got My Keys: Dissecting the Attack Safely
Pavel Espitia
Pavel Espitia
Pavel Espitia
Follow
Jul 25
A Typosquat Package Almost Got My Keys: Dissecting the Attack Safely
#
security
#
npm
#
node
#
webdev
2
 reactions
Comments
Add Comment
5 min read
A Supply-Chain Worm Wrote Itself Into Claude Code's Hook Files to Survive Credential Rotation
Ramdai Bista
Ramdai Bista
Ramdai Bista
Follow
Aug 23
A Supply-Chain Worm Wrote Itself Into Claude Code's Hook Files to Survive Credential Rotation
#
claudecode
#
security
#
supplychain
#
npm
Comments
Add Comment
2 min read
How many npm packages actually run code when you `npm install`? I measured a sample.
ahmet cetin
ahmet cetin
ahmet cetin
Follow
Aug 10
How many npm packages actually run code when you `npm install`? I measured a sample.
#
security
#
node
#
devops
#
npm
1
 reaction
Comments
5
 comments
4 min read
7,798 Components. Import One, Ship One.
James Coombs
James Coombs
James Coombs
Follow
Aug 20
7,798 Components. Import One, Ship One.
#
javascript
#
typescript
#
webdev
#
npm
1
 reaction
Comments
Add Comment
5 min read
I built a Khmer Hybrid Calendar package for JavaScript/TypeScript
Heng LOEM
Heng LOEM
Heng LOEM
Follow
Jul 17
I built a Khmer Hybrid Calendar package for JavaScript/TypeScript
#
npm
#
programming
#
webdev
2
 reactions
Comments
Add Comment
1 min read
Simplifying Authorization in NestJS: A New Approach
Midhun G S
Midhun G S
Midhun G S
Follow
Jul 16
Simplifying Authorization in NestJS: A New Approach
#
nestjs
#
security
#
npm
#
webdev
Comments
Add Comment
2 min read
I Built a Zero-Dependency Rate Limiter That Works Across Every Node.js Framework
Aman Thakur
Aman Thakur
Aman Thakur
Follow
Aug 8
I Built a Zero-Dependency Rate Limiter That Works Across Every Node.js Framework
#
webdev
#
node
#
npm
#
algorithms
1
 reaction
Comments
Add Comment
4 min read
The technical debt of others
Tracy Gilmore
Tracy Gilmore
Tracy Gilmore
Follow
Jul 26
The technical debt of others
#
ai
#
npm
#
programming
7
 reactions
Comments
1
 comment
1 min read
gitlawb-zero Heads to 0.4.0 With a Native npm Binary and Tighter Sandbox
TerminalBlog
TerminalBlog
TerminalBlog
Follow
Jul 11
gitlawb-zero Heads to 0.4.0 With a Native npm Binary and Tighter Sandbox
#
release
#
gitlawbzero
#
sandbox
#
npm
Comments
Add Comment
2 min read
đź‘‹
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
We're a place where coders share, stay up-to-date and grow their careers.
Log in
Create account