DEV Community

npm

Node Package Manager

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
I need to discuss this about Gemini
banana_cool profile

I need to discuss this about Gemini

#gemini #ai #npm #git
1
Comments
4 min read
GitHub brings new digital filter to block dangerous software packages
hacksgr profile

GitHub brings new digital filter to block dangerous software packages

#github #npm #supplychain #devsecops
Comments
2 min read
How I Cut 40KB from My Edge Bundle with Zero-Dep Utils
michael_ed0600820f49eb89a profile

How I Cut 40KB from My Edge Bundle with Zero-Dep Utils

#webdev #opensource #typescript #npm
Comments
2 min read
Why your firebase-admin 14 Dependabot PR fails with ERESOLVE (and how to unblock it)
ivan_tsomo_c71556b8abba1f profile

Why your firebase-admin 14 Dependabot PR fails with ERESOLVE (and how to unblock it)

#discuss #firebase #node #npm
Comments
4 min read
npm Supply Chain: The Worm That Walked In Through Trusted Publishing
marco_odev profile

npm Supply Chain: The Worm That Walked In Through Trusted Publishing

#security #npm #javascript #node
Comments
10 min read
Three gates before your first npm publish: 2FA, provenance, and staged releases
dogwind221 profile

Three gates before your first npm publish: 2FA, provenance, and staged releases

#npm #githubactions #opensource #supplychain
1
Comments
6 min read
Why I Built bunpm: Route npm, yarn & pnpm Through Bun Without Touching Your Scripts
yv_3000 profile

Why I Built bunpm: Route npm, yarn & pnpm Through Bun Without Touching Your Scripts

#node #npm #bunjs #opensource
1
Comments
2 min read
I Found 53 Real Email Addresses Behind One Tiny npm Package
ronin13 profile

I Found 53 Real Email Addresses Behind One Tiny npm Package

#discuss #programming #security #npm
Comments
7 min read
A maintained package can still ship malware. What a health check can and can't see.
kotakanbe profile

A maintained package can still ship malware. What a health check can and can't see.

#security #opensource #npm #supplychain
Comments 2
11 min read
Three bugs my npm packages shipped, and the checks that catch them now
mostafashadow profile

Three bugs my npm packages shipped, and the checks that catch them now

#javascript #npm #nextjs #typescript
Comments
3 min read
npm Security Advisories Withdrawn for Popular Packages, Questioning Automated Audit Reliability
maricode profile

npm Security Advisories Withdrawn for Popular Packages, Questioning Automated Audit Reliability

#security #npm #audits #vulnerabilities
Comments
9 min read
How I automated npm dependency upgrades with an AI skill
rerodrigues profile

How I automated npm dependency upgrades with an AI skill

#npm #ai #productivity #opensource
Comments
6 min read
Bear UI 1.3.5 — charts, AI, code, maps, and kanban now have their own packages
john_yaghobieh_8f294091f6 profile

Bear UI 1.3.5 — charts, AI, code, maps, and kanban now have their own packages

#frontend #javascript #npm #react
Comments
3 min read
Two npm Bugs, One Lesson: Upgrading the Runtime Is Not Upgrading the Dependencies
jeffreyciend profile

Two npm Bugs, One Lesson: Upgrading the Runtime Is Not Upgrading the Dependencies

#npm #jwt #pathtraversal #dependencymanagement
Comments 1
4 min read
The fast-jwt fix for algorithm confusion missed the prefix
ioneyrezende profile

The fast-jwt fix for algorithm confusion missed the prefix

#jwt #authentication #library #npm
Comments
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.