DEV Community

npm

Node Package Manager

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
I checked 2,905 npm packages with 1M+ weekly downloads. 887 haven't shipped a release in over a year.

I checked 2,905 npm packages with 1M+ weekly downloads. 887 haven't shipped a release in over a year.

Comments
6 min read
Auto-allow npm scripts in Claude Code without allowing npm install

Auto-allow npm scripts in Claude Code without allowing npm install

Comments 1
3 min read
Publishing SDKs to npm, PyPI, Maven Central and the rest

Publishing SDKs to npm, PyPI, Maven Central and the rest

Comments
4 min read
Next.js 16.3 vulnerabilities: which version is patched?

Next.js 16.3 vulnerabilities: which version is patched?

Comments
5 min read
Shai-Hulud Just Infected an AI Agent Platform's npm Package — What Self-Hosted n8n Builders Must Do Now

Shai-Hulud Just Infected an AI Agent Platform's npm Package — What Self-Hosted n8n Builders Must Do Now

Comments
7 min read
The Proactive Shift: How npm's Scan-and-Prevent Model is Securing Your Software Supply Chain

The Proactive Shift: How npm's Scan-and-Prevent Model is Securing Your Software Supply Chain

Comments
5 min read
CVE-2026-6951 — Bypassing simple-git's Blocklist via the --config Flag (RCE Analysis)

CVE-2026-6951 — Bypassing simple-git's Blocklist via the --config Flag (RCE Analysis)

Comments
7 min read
prisma generate not working: "No command registered" (Prisma 8)

prisma generate not working: "No command registered" (Prisma 8)

Comments
5 min read
ChainDrop Had Valid Provenance. That Was Not Enough.

ChainDrop Had Valid Provenance. That Was Not Enough.

Comments 1
2 min read
Package of the Week: fast-equals scores 95/100, and the one thing dragging it down isn't what you'd guess

Package of the Week: fast-equals scores 95/100, and the one thing dragging it down isn't what you'd guess

Comments
1 min read
Your NPM_TOKEN stops publishing in January 2027. Here's the one-command migration

Your NPM_TOKEN stops publishing in January 2027. Here's the one-command migration

Comments
3 min read
I built an Instagram Reels feed in React Native. Here's what broke.

I built an Instagram Reels feed in React Native. Here's what broke.

Comments
7 min read
I named three developer tools. All three names were taken on npm.

I named three developer tools. All three names were taken on npm.

Comments
3 min read
here is Idiva!

here is Idiva!

Comments
1 min read
✨ Meet Swingly — a tiny character that lives on your webpage and swings gently.

✨ Meet Swingly — a tiny character that lives on your webpage and swings gently.

Comments
1 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.