DEV Community

npm

Node Package Manager

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
My 4KB React package was installing 116 dependencies. Here's what I found when I audited it.

My 4KB React package was installing 116 dependencies. Here's what I found when I audited it.

3
Comments 1
5 min read
The npm worm that shipped with valid SLSA provenance

The npm worm that shipped with valid SLSA provenance

Comments
4 min read
I got tired of mocking Date, so I built a TimeProvider for JavaScript / TypeScript

I got tired of mocking Date, so I built a TimeProvider for JavaScript / TypeScript

1
Comments
2 min read
A Typosquat Package Almost Got My Keys: Dissecting the Attack Safely

A Typosquat Package Almost Got My Keys: Dissecting the Attack Safely

2
Comments
5 min read
How many npm packages actually run code when you `npm install`? I measured a sample.

How many npm packages actually run code when you `npm install`? I measured a sample.

1
Comments 5
4 min read
7,798 Components. Import One, Ship One.

7,798 Components. Import One, Ship One.

1
Comments
5 min read
I built a Khmer Hybrid Calendar package for JavaScript/TypeScript

I built a Khmer Hybrid Calendar package for JavaScript/TypeScript

2
Comments
1 min read
Simplifying Authorization in NestJS: A New Approach

Simplifying Authorization in NestJS: A New Approach

Comments
2 min read
I Built a Zero-Dependency Rate Limiter That Works Across Every Node.js Framework

I Built a Zero-Dependency Rate Limiter That Works Across Every Node.js Framework

1
Comments
4 min read
The technical debt of others

The technical debt of others

7
Comments 1
1 min read
gitlawb-zero Heads to 0.4.0 With a Native npm Binary and Tighter Sandbox

gitlawb-zero Heads to 0.4.0 With a Native npm Binary and Tighter Sandbox

Comments
2 min read
Two npm worms shipped with valid provenance this year

Two npm worms shipped with valid provenance this year

1
Comments
5 min read
We Open-Sourced 42 Construction Calculators — Here's Why

We Open-Sourced 42 Construction Calculators — Here's Why

3
Comments
1 min read
nx-safe-suite: A Deep Dive Into Five Production-Grade Next.js Packages

nx-safe-suite: A Deep Dive Into Five Production-Grade Next.js Packages

4
Comments 1
7 min read
I Built Five npm Packages to Solve the Five Problems Every Next.js Backend Ignores

I Built Five npm Packages to Solve the Five Problems Every Next.js Backend Ignores

2
Comments 1
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.