DEV Community

npm

Node Package Manager

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
The Streak Continues: Four More Supply Chain Attacks Hit npm and PyPI

The Streak Continues: Four More Supply Chain Attacks Hit npm and PyPI

Comments
7 min read
How I Published My First npm Packages

How I Published My First npm Packages

1
Comments
5 min read
Protect your application from npm supply chain attacks with tinyNpm!

Protect your application from npm supply chain attacks with tinyNpm!

6
Comments
1 min read
About Modules...

About Modules...

Comments
3 min read
Why I Chose Copy-and-Paste Components Instead of an npm Package

Why I Chose Copy-and-Paste Components Instead of an npm Package

Comments
2 min read
Docker's fourth horror story revisits the Nx post-install hook that drained CI secrets

Docker's fourth horror story revisits the Nx post-install hook that drained CI secrets

Comments
3 min read
How redis-packhash Helps You Leverage Listpack Hashes in Redis

How redis-packhash Helps You Leverage Listpack Hashes in Redis

Comments
4 min read
How to Audit a npm Package for Malware in 10 Minutes

How to Audit a npm Package for Malware in 10 Minutes

1
Comments
4 min read
How do I group an array of objects in JavaScript and sum a field?

How do I group an array of objects in JavaScript and sum a field?

1
Comments
2 min read
Dependabot's 3-Day Cooldown: Why Waiting Is Now Safer

Dependabot's 3-Day Cooldown: Why Waiting Is Now Safer

Comments
4 min read
npm Dependencies: How to Evaluate a Library Before It Hits Production

npm Dependencies: How to Evaluate a Library Before It Hits Production

1
Comments
7 min read
I Ported python-semanticversion to Rust in 72 Hours: What Broke, How I Proved Parity, and the 6-Hour Edge Case

I Ported python-semanticversion to Rust in 72 Hours: What Broke, How I Proved Parity, and the 6-Hour Edge Case

1
Comments
5 min read
My 4KB React package was installing 116 dependencies. Here's what I found when I audited it.

My 4KB React package was installing 116 dependencies. Here's what I found when I audited it.

3
Comments 1
5 min read
The npm worm that shipped with valid SLSA provenance

The npm worm that shipped with valid SLSA provenance

Comments
4 min read
I got tired of mocking Date, so I built a TimeProvider for JavaScript / TypeScript

I got tired of mocking Date, so I built a TimeProvider for JavaScript / TypeScript

1
Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.