DEV Community

npm

Node Package Manager

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
What is FNM ?

What is FNM ?

1
Comments
2 min read
Our beta became the version every new customer installed

Our beta became the version every new customer installed

Comments
2 min read
The npm worm playbook for a small team

The npm worm playbook for a small team

Comments 1
6 min read
TanStack npm supply-chain attack: how a Dependabot bump spread a worm

TanStack npm supply-chain attack: how a Dependabot bump spread a worm

1
Comments
10 min read
npm trusted publishing finally covers dist-tags, if you ask nicely

npm trusted publishing finally covers dist-tags, if you ask nicely

Comments
5 min read
Stop Hand-Building Brand Themes: Meet ThemeForge

Stop Hand-Building Brand Themes: Meet ThemeForge

Comments
3 min read
How to fix package-lock.json merge conflicts (and yarn.lock, poetry.lock, go.sum) the right way

How to fix package-lock.json merge conflicts (and yarn.lock, poetry.lock, go.sum) the right way

Comments
2 min read
npm's "latest" Is a Label a Maintainer Sets. PyPI's and crates.io's Is Just Math.

npm's "latest" Is a Label a Maintainer Sets. PyPI's and crates.io's Is Just Math.

Comments 1
7 min read
Khmer Hybrid Calendar v1.1.0 Released — Complete Holidays, UNESCO Heritage & 10x Faster 🚀

Khmer Hybrid Calendar v1.1.0 Released — Complete Holidays, UNESCO Heritage & 10x Faster 🚀

Comments
2 min read
We Blamed the Market for a Metric Our Own Clients Broke

We Blamed the Market for a Metric Our Own Clients Broke

Comments
6 min read
yarn.lock: may the `--force` be with you

yarn.lock: may the `--force` be with you

1
Comments 1
14 min read
yarn.lock: you can't `sed` a graph

yarn.lock: you can't `sed` a graph

1
Comments 1
10 min read
Mitigating Security Risks from Malicious npm Packages Through Enhanced Vetting and Monitoring

Mitigating Security Risks from Malicious npm Packages Through Enhanced Vetting and Monitoring

1
Comments
13 min read
express-validator

express-validator

1
Comments
6 min read
None of the Big Package Registries Can Tell You If a Dependency Is Abandoned

None of the Big Package Registries Can Tell You If a Dependency Is Abandoned

Comments 2
7 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.