DEV Community

npm

Node Package Manager

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Dependabot's 3-Day Cooldown: Why Waiting Is Now Safer

Dependabot's 3-Day Cooldown: Why Waiting Is Now Safer

Comments
4 min read
npm Dependencies: How to Evaluate a Library Before It Hits Production

npm Dependencies: How to Evaluate a Library Before It Hits Production

1
Comments
7 min read
I Ported python-semanticversion to Rust in 72 Hours: What Broke, How I Proved Parity, and the 6-Hour Edge Case

I Ported python-semanticversion to Rust in 72 Hours: What Broke, How I Proved Parity, and the 6-Hour Edge Case

1
Comments
5 min read
My 4KB React package was installing 116 dependencies. Here's what I found when I audited it.

My 4KB React package was installing 116 dependencies. Here's what I found when I audited it.

3
Comments 1
5 min read
The npm worm that shipped with valid SLSA provenance

The npm worm that shipped with valid SLSA provenance

Comments
4 min read
I got tired of mocking Date, so I built a TimeProvider for JavaScript / TypeScript

I got tired of mocking Date, so I built a TimeProvider for JavaScript / TypeScript

1
Comments
2 min read
A Typosquat Package Almost Got My Keys: Dissecting the Attack Safely

A Typosquat Package Almost Got My Keys: Dissecting the Attack Safely

2
Comments
5 min read
A Supply-Chain Worm Wrote Itself Into Claude Code's Hook Files to Survive Credential Rotation

A Supply-Chain Worm Wrote Itself Into Claude Code's Hook Files to Survive Credential Rotation

Comments
2 min read
How many npm packages actually run code when you `npm install`? I measured a sample.

How many npm packages actually run code when you `npm install`? I measured a sample.

1
Comments 5
4 min read
7,798 Components. Import One, Ship One.

7,798 Components. Import One, Ship One.

1
Comments
5 min read
I built a Khmer Hybrid Calendar package for JavaScript/TypeScript

I built a Khmer Hybrid Calendar package for JavaScript/TypeScript

2
Comments
1 min read
Simplifying Authorization in NestJS: A New Approach

Simplifying Authorization in NestJS: A New Approach

Comments
2 min read
I Built a Zero-Dependency Rate Limiter That Works Across Every Node.js Framework

I Built a Zero-Dependency Rate Limiter That Works Across Every Node.js Framework

1
Comments
4 min read
The technical debt of others

The technical debt of others

7
Comments 1
1 min read
gitlawb-zero Heads to 0.4.0 With a Native npm Binary and Tighter Sandbox

gitlawb-zero Heads to 0.4.0 With a Native npm Binary and Tighter Sandbox

Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.