DEV Community

npm

Node Package Manager

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Security Notice: @bananacool467/ui-tools — Use 0.1.9-beta or Newer
banana_cool profile

Security Notice: @bananacool467/ui-tools — Use 0.1.9-beta or Newer

#npm #security
Comments
4 min read
Introducing mutex-forge: Mutex & Semaphore for async JavaScript
javonayers999 profile

Introducing mutex-forge: Mutex & Semaphore for async JavaScript

#javascript #typescript #npm #node
5
Comments 1
1 min read
npm provenance attestations get worn as camouflage in a new worm-style attack
leobaniak profile
Leo

npm provenance attestations get worn as camouflage in a new worm-style attack

#npm #supplychain #provenance #attestations
Comments
5 min read
I Kept Rebuilding PDF Features in Vue 3, So I Built vue3-pdf-export
saurabhzaiswal profile

I Kept Rebuilding PDF Features in Vue 3, So I Built vue3-pdf-export

#vue #npm #typescript #webdev
Comments
7 min read
Two npm worms shipped with valid provenance this year
booyaka101 profile

Two npm worms shipped with valid provenance this year

#javascript #security #npm #devops
1
Comments
5 min read
responsive-tailwind: The Utility That Refuses To Build Your Class Names
babyreptile profile

responsive-tailwind: The Utility That Refuses To Build Your Class Names

#webdev #tailwindcss #react #npm
Comments
6 min read
The GITHUB_TOKEN in Your .zshrc Is a Time Bomb (And So Is Your .npmrc)
david_shibley profile

The GITHUB_TOKEN in Your .zshrc Is a Time Bomb (And So Is Your .npmrc)

#security #npm #cli #productivity
Comments
5 min read
When ‘Are We Affected?’ Requires Reconstructing Yesterday’s npm Install
demivalerith profile

When ‘Are We Affected?’ Requires Reconstructing Yesterday’s npm Install

#security #javascript #devops #npm
1
Comments
3 min read
pnpm wins in monorepos, npm wins on zero friction
jtorchia profile

pnpm wins in monorepos, npm wins on zero friction

#english #nextjs #pnpm #npm
1
Comments
7 min read
Keyv and Cacheable npm Supply Chain Compromise
informertech profile

Keyv and Cacheable npm Supply Chain Compromise

#cybersecurity #webdev #npm
Comments
7 min read
⚠️ Shai-Hulud opens your IDE: the npm worm that beats --ignore-scripts
kenimo49 profile

⚠️ Shai-Hulud opens your IDE: the npm worm that beats --ignore-scripts

#security #npm #javascript #devsecops
2
Comments
6 min read
I Built PkgDiet — A CLI to Clean Up Your npm Dependencies 🥗
omtajne profile

I Built PkgDiet — A CLI to Clean Up Your npm Dependencies 🥗

#javascript #npm #node #opensource
1
Comments
1 min read
The npm `overrides` Snippet Everyone Copy-Pastes — And What It Actually Does
mayank7924 profile

The npm `overrides` Snippet Everyone Copy-Pastes — And What It Actually Does

#javascript #npm #nodejs #react
1
Comments
4 min read
🚀 SuriLens: An Open-Source Real-Time Backend Execution Visualizer for Node.js
sonisuryansh profile

🚀 SuriLens: An Open-Source Real-Time Backend Execution Visualizer for Node.js

#node #javascript #opensource #npm
Comments
2 min read
npm walls off 2FA-bypass tokens from account and package management
leobaniak profile
Leo

npm walls off 2FA-bypass tokens from account and package management

#npm #supplychainsecurity #2fa #accesstokens
Comments
3 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.