DEV Community

npm

Node Package Manager

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
58% of engineers spend 11+ hours per month validating AI code

58% of engineers spend 11+ hours per month validating AI code

4
Comments 2
3 min read
Attempt to stop npm postinstall scripts from stealing your secrets

Attempt to stop npm postinstall scripts from stealing your secrets

1
Comments
4 min read
Shareable Diagnostics: Generating HTML Reports From Production Profiling

Shareable Diagnostics: Generating HTML Reports From Production Profiling

Comments
6 min read
Why One Second Wasn't Enough: Adding Retry Logic to a Diagnostic Tool

Why One Second Wasn't Enough: Adding Retry Logic to a Diagnostic Tool

Comments
5 min read
Sonner vs. robot-toast: When "Invisible" UI Isn't Enough

Sonner vs. robot-toast: When "Invisible" UI Isn't Enough

3
Comments
1 min read
Anthropic Accidentally Published 513K Lines of Claude Code Source on npm — What Developers Need to Know

Anthropic Accidentally Published 513K Lines of Claude Code Source on npm — What Developers Need to Know

Comments
2 min read
When the Patient Dies on the Table: Handling Target Process Exit During Profiling

When the Patient Dies on the Table: Handling Target Process Exit During Profiling

Comments
5 min read
Less Is More: Why We Added a Flag to Disable Our Best Feature

Less Is More: Why We Added a Flag to Disable Our Best Feature

Comments
4 min read
Not All Requests Are Equal: Adding Variable Cost to a Node.js Rate Limiter

Not All Requests Are Equal: Adding Variable Cost to a Node.js Rate Limiter

2
Comments
6 min read
42 @tanstack/* Packages Were Compromised on npm: What Happened, How It Works, and What You Must Do Right Now

42 @tanstack/* Packages Were Compromised on npm: What Happened, How It Works, and What You Must Do Right Now

Comments
10 min read
I got tired of calculating commercial lease billing by hand, so I built a tool

I got tired of calculating commercial lease billing by hand, so I built a tool

4
Comments
2 min read
MCP Ecosystem Security Pulse: April 2026

MCP Ecosystem Security Pulse: April 2026

1
Comments
3 min read
Setting GitHub as a trusted publisher for npm

Setting GitHub as a trusted publisher for npm

1
Comments
2 min read
The Worm in the Registry

The Worm in the Registry

2
Comments
10 min read
Mini Shai-Hulud: un gusano de cadena de suministro que explotĂł TanStack y el ecosistema npm.

Mini Shai-Hulud: un gusano de cadena de suministro que explotĂł TanStack y el ecosistema npm.

2
Comments
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.