DEV Community

npm

Node Package Manager

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
npm walls off 2FA-bypass tokens from account and package management

npm walls off 2FA-bypass tokens from account and package management

Comments
3 min read
The Streak Continues: Four More Supply Chain Attacks Hit npm and PyPI

The Streak Continues: Four More Supply Chain Attacks Hit npm and PyPI

Comments
7 min read
How I Published My First npm Packages

How I Published My First npm Packages

1
Comments
5 min read
Protect your application from npm supply chain attacks with tinyNpm!

Protect your application from npm supply chain attacks with tinyNpm!

6
Comments
1 min read
nx-safe-suite: A Deep Dive Into Five Production-Grade Next.js Packages

nx-safe-suite: A Deep Dive Into Five Production-Grade Next.js Packages

3
Comments
7 min read
About Modules...

About Modules...

Comments
3 min read
Why I Chose Copy-and-Paste Components Instead of an npm Package

Why I Chose Copy-and-Paste Components Instead of an npm Package

Comments
2 min read
Docker's fourth horror story revisits the Nx post-install hook that drained CI secrets

Docker's fourth horror story revisits the Nx post-install hook that drained CI secrets

Comments
3 min read
How redis-packhash Helps You Leverage Listpack Hashes in Redis

How redis-packhash Helps You Leverage Listpack Hashes in Redis

Comments
4 min read
Dependabot's 3-Day Cooldown: Why Waiting Is Now Safer

Dependabot's 3-Day Cooldown: Why Waiting Is Now Safer

Comments
4 min read
npm Dependencies: How to Evaluate a Library Before It Hits Production

npm Dependencies: How to Evaluate a Library Before It Hits Production

1
Comments
7 min read
I Ported python-semanticversion to Rust in 72 Hours: What Broke, How I Proved Parity, and the 6-Hour Edge Case

I Ported python-semanticversion to Rust in 72 Hours: What Broke, How I Proved Parity, and the 6-Hour Edge Case

1
Comments
5 min read
The npm worm that shipped with valid SLSA provenance

The npm worm that shipped with valid SLSA provenance

Comments
4 min read
I got tired of mocking Date, so I built a TimeProvider for JavaScript / TypeScript

I got tired of mocking Date, so I built a TimeProvider for JavaScript / TypeScript

1
Comments
2 min read
A Typosquat Package Almost Got My Keys: Dissecting the Attack Safely

A Typosquat Package Almost Got My Keys: Dissecting the Attack Safely

2
Comments
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.