Skip to content
Navigation menu
Search
Powered by Algolia
Search
Log in
Create account
DEV Community
Close
npm
Node Package Manager
Follow
Hide
Posts
Left menu
đ
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
Right menu
A Rogue Registry in My Own Backyard: Anatomy of a Two-Line Supply Chain Attack
Sebastian SchĂŒrmann
Sebastian SchĂŒrmann
Sebastian SchĂŒrmann
Follow
Jun 27
A Rogue Registry in My Own Backyard: Anatomy of a Two-Line Supply Chain Attack
#
npm
#
security
#
supplychain
1
 reaction
Comments
Add Comment
6 min read
Moving from Migrate Mongo to Mongo Migrate Kit (mmk) Without Re Running Old Migrations
Santosh Gupta
Santosh Gupta
Santosh Gupta
Follow
Jun 25
Moving from Migrate Mongo to Mongo Migrate Kit (mmk) Without Re Running Old Migrations
#
database
#
mongodb
#
node
#
npm
Comments
Add Comment
2 min read
The New Standard for NPM Package Discovery: Deep Dive into LibPilot
Saiful Siam
Saiful Siam
Saiful Siam
Follow
Jun 24
The New Standard for NPM Package Discovery: Deep Dive into LibPilot
#
javascript
#
webdev
#
ai
#
npm
2
 reactions
Comments
Add Comment
3 min read
npm Dependencies: How to Evaluate a Library Before Shipping It to Production
Juan Torchia
Juan Torchia
Juan Torchia
Follow
Jun 22
npm Dependencies: How to Evaluate a Library Before Shipping It to Production
#
english
#
typescript
#
pnpm
#
npm
1
 reaction
Comments
Add Comment
8 min read
Most apps do not need a full date library, so I built a 2KB one
ë ë€ëì„
ë ë€ëì„
ë ë€ëì„
Follow
Jun 21
Most apps do not need a full date library, so I built a 2KB one
#
javascript
#
typescript
#
npm
#
opensource
Comments
Add Comment
3 min read
Five days with eventferry â MySQL, SQL Server, MSK IAM, and a core that didn't move
Samet GOKTEPE
Samet GOKTEPE
Samet GOKTEPE
Follow
Jun 20
Five days with eventferry â MySQL, SQL Server, MSK IAM, and a core that didn't move
#
node
#
kafka
#
typescript
#
npm
Comments
Add Comment
8 min read
Your package-lock.json diff is unreadable. That's a supply-chain problem.
benjamin
benjamin
benjamin
Follow
Jun 17
Your package-lock.json diff is unreadable. That's a supply-chain problem.
#
showdev
#
security
#
npm
#
opensource
Comments
Add Comment
3 min read
Agent contexts - A tool for AI coding agents context management
Francesco Marchesini
Francesco Marchesini
Francesco Marchesini
Follow
Jun 17
Agent contexts - A tool for AI coding agents context management
#
ai
#
agents
#
coding
#
npm
Comments
Add Comment
8 min read
OIDC Authentication Succeeded, but npm Publish Returned 404 â Hereâs What Happened
0xkoji
0xkoji
0xkoji
Follow
Jul 21
OIDC Authentication Succeeded, but npm Publish Returned 404 â Hereâs What Happened
#
github
#
npm
3
 reactions
Comments
Add Comment
2 min read
I Built a Library to Sync Browser Tabs đ
Mohamed Ismail
Mohamed Ismail
Mohamed Ismail
Follow
Jun 15
I Built a Library to Sync Browser Tabs đ
#
webdev
#
javasc
#
react
#
npm
3
 reactions
Comments
Add Comment
5 min read
I built a CLI that generates .env files so I never read docs again
Joseph Kariuki
Joseph Kariuki
Joseph Kariuki
Follow
Jun 18
I built a CLI that generates .env files so I never read docs again
#
npm
#
programming
#
javascript
#
devops
1
 reaction
Comments
1
 comment
2 min read
One npm Account Publishes 964 Million Downloads Per Week. None Have Provenance.
Pico
Pico
Pico
Follow
Jun 18
One npm Account Publishes 964 Million Downloads Per Week. None Have Provenance.
#
npm
#
security
#
supplychain
#
javascript
Comments
Add Comment
3 min read
flame-core v1.1.0 â More Firebase, Less Boilerplate
Abhijith P Subash
Abhijith P Subash
Abhijith P Subash
Follow
Jun 13
flame-core v1.1.0 â More Firebase, Less Boilerplate
#
firebase
#
npm
#
typescript
#
javascript
Comments
Add Comment
2 min read
I made revera, a tool that scores NPM packages before you blindly install them
Aarav Maloo
Aarav Maloo
Aarav Maloo
Follow
Jul 5
I made revera, a tool that scores NPM packages before you blindly install them
#
typescript
#
cli
#
npm
2
 reactions
Comments
2
 comments
1 min read
I built an Akinator API that works in 2026 â with TypeScript and JavaScript, retry, and proxy support
LucasX7
LucasX7
LucasX7
Follow
Jul 16
I built an Akinator API that works in 2026 â with TypeScript and JavaScript, retry, and proxy support
#
javascript
#
typescript
#
npm
#
api
3
 reactions
Comments
Add Comment
2 min read
đ
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
We're a place where coders share, stay up-to-date and grow their careers.
Log in
Create account