DEV Community

npm

Node Package Manager

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Scarab Diagnostic Field Test #021 — pnpm Self-Upgrade No-Manifest Boundary
scarab-systems profile

Scarab Diagnostic Field Test #021 — pnpm Self-Upgrade No-Manifest Boundary

#discuss #ai #npm #devops
2
Comments
4 min read
The NPM Audit Trap: A Thursday Morning Tragedy
proco profile

The NPM Audit Trap: A Thursday Morning Tragedy

#webdev #node #npm
Comments
2 min read
Microsoft's npm Packages Got Backdoored. Again. And AI Agents Pulled the Trigger.
thegatewayguy profile

Microsoft's npm Packages Got Backdoored. Again. And AI Agents Pulled the Trigger.

#security #devops #npm #kubernetes
Comments
2 min read
Shipping archkit v0.1: a TypeScript Clean Architecture scaffolder built in one Claude Code session
alexrogovjs profile

Shipping archkit v0.1: a TypeScript Clean Architecture scaffolder built in one Claude Code session

#typescript #cleanarchitecture #npm #claudecode
Comments 1
7 min read
Hi all
ayushmahadik profile

Hi all

#showdev #design #npm #ui
Comments
1 min read
I Researched the Red Hat npm Incident — Here's What Every Developer Should Know
deviduttadas3 profile

I Researched the Red Hat npm Incident — Here's What Every Developer Should Know

#cybersecurity #javascript #npm #security
5
Comments
1 min read
Modern JavaScript Tooling Explained: npm, npx, pnpm, Yarn & Bun
srsoumyax11 profile

Modern JavaScript Tooling Explained: npm, npx, pnpm, Yarn & Bun

#javascript #node #npm #tooling
1
Comments
5 min read
guard-install now scans GitHub repos before you run them
nithindj192 profile

guard-install now scans GitHub repos before you run them

#npm #node #riskanalysis
Comments
1 min read
Rust Was Crashing. Go Fixed It. Copilot Showed Me Why

GitHub “Finish-Up-A-Thon” Challenge Submission
fz0x00 profile
Fz0x00

Rust Was Crashing. Go Fixed It. Copilot Showed Me Why

#devchallenge #githubchallenge #npm #security
5
Comments
4 min read
From pnpm's Cool Feature to npm's Life jacket: The (somewhat accidental) birth of age-install
cinfinitedev_engine profile

From pnpm's Cool Feature to npm's Life jacket: The (somewhat accidental) birth of age-install

#npm #javascript #security #softwareengineering
Comments
6 min read
Malicious npm Packages With Valid SLSA Provenance: Inside the TanStack Attack
olivrg profile

Malicious npm Packages With Valid SLSA Provenance: Inside the TanStack Attack

#npm #security #agents #mcp
1
Comments 2
5 min read
npm installs packages blindly — I built a CLI to fix that
nithindj192 profile

npm installs packages blindly — I built a CLI to fix that

#showdev #cli #npm #security
Comments
1 min read
Add a 50x+ faster duplicate-code gate to GitHub Actions with jscpd-rs
vvbogdanov profile

Add a 50x+ faster duplicate-code gate to GitHub Actions with jscpd-rs

#npm #performance #devops #ai
3
Comments
5 min read
Four MCP packages, four ways the supply chain shifted in two weeks of npm monitoring
michael_onyekwere profile

Four MCP packages, four ways the supply chain shifted in two weeks of npm monitoring

#security #supplychain #mcp #npm
Comments
7 min read
Hardening npm dependency security
alexocallaghan profile

Hardening npm dependency security

#security #node #webdev #npm
Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.