Skip to content
Navigation menu
Search
Powered by Algolia
Search
Log in
Create account
DEV Community
Close
npm
Node Package Manager
Follow
Hide
Posts
Left menu
đź‘‹
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
Right menu
express-validator
Deval Ujeniya
Deval Ujeniya
Deval Ujeniya
Follow
Sep 24
express-validator
#
express
#
backenddevelopment
#
javascript
#
npm
1
 reaction
Comments
Add Comment
6 min read
Moderation
None of the Big Package Registries Can Tell You If a Dependency Is Abandoned
Noble Ronin
Noble Ronin
Noble Ronin
Follow
Sep 28
None of the Big Package Registries Can Tell You If a Dependency Is Abandoned
#
discuss
#
programming
#
opensource
#
npm
Comments
2
 comments
7 min read
Moderation
74 minutes before the advisory: graph triage for npm account hijacks
Yash Arya
Yash Arya
Yash Arya
Follow
Oct 16
74 minutes before the advisory: graph triage for npm account hijacks
#
falkordb
#
security
#
npm
#
graphdatabase
Comments
Add Comment
9 min read
Moderation
AI Coding Assistants Invent Fake Packages 1 in 5 Times — Attackers Are Already Registering Them
Teo Crispin
Teo Crispin
Teo Crispin
Follow
Sep 23
AI Coding Assistants Invent Fake Packages 1 in 5 Times — Attackers Are Already Registering Them
#
security
#
ai
#
webdev
#
npm
Comments
Add Comment
2 min read
Moderation
Modern Open-Source Maintenance: Secure Package Publishing, SemVer, and Automated Scanning
Muhammad Tahir
Muhammad Tahir
Muhammad Tahir
Follow
Sep 23
Modern Open-Source Maintenance: Secure Package Publishing, SemVer, and Automated Scanning
#
opensource
#
npm
#
securityscanning
#
semanticversioning
Comments
Add Comment
9 min read
Moderation
npm Explained: The Package Manager Behind JavaScript
The Practical Developer
The Practical Developer
The Practical Developer
Follow
Oct 27
npm Explained: The Package Manager Behind JavaScript
#
npm
#
javascript
#
beginners
#
programming
Comments
Add Comment
2 min read
Moderation
A Supply-Chain Attack Hit Our Repos. Here's How We Locked Down GitHub So It Can't Happen Again
Muhammad Nauman Hafeez
Muhammad Nauman Hafeez
Muhammad Nauman Hafeez
Follow
Sep 23
A Supply-Chain Attack Hit Our Repos. Here's How We Locked Down GitHub So It Can't Happen Again
#
github
#
devops
#
security
#
npm
Comments
Add Comment
3 min read
Moderation
capsurface: reviewing capability changes in npm dependencies
VIctor Martins
VIctor Martins
VIctor Martins
Follow
Sep 22
capsurface: reviewing capability changes in npm dependencies
#
security
#
npm
#
javascript
#
node
1
 reaction
Comments
Add Comment
5 min read
Moderation
Good News For Backend And Devops Buddy
Nahid
Nahid
Nahid
Follow
Sep 20
Good News For Backend And Devops Buddy
#
backend
#
devops
#
npm
#
devtool
Comments
Add Comment
2 min read
Moderation
How npm worms steal your credentials, and the order to rotate them in
Krrish Kumar
Krrish Kumar
Krrish Kumar
Follow
Oct 22
How npm worms steal your credentials, and the order to rotate them in
#
security
#
npm
#
node
#
devops
Comments
4
 comments
7 min read
Moderation
Caching VAT and FX Rates at Build Time, Not on the Request Path
Iurii Rogulia
Iurii Rogulia
Iurii Rogulia
Follow
Sep 18
Caching VAT and FX Rates at Build Time, Not on the Request Path
#
node
#
typescript
#
ecb
#
npm
Comments
Add Comment
8 min read
Moderation
What a Job Take-Home Taught Me About npm Supply-Chain Attacks
Naval Saini
Naval Saini
Naval Saini
Follow
Sep 17
What a Job Take-Home Taught Me About npm Supply-Chain Attacks
#
security
#
npm
#
javascript
#
cybersecurity
Comments
1
 comment
3 min read
Moderation
I checked 26 popular Node.js starters. 18 ship a high-severity vulnerability that npm update can't fix
Marius Bancos
Marius Bancos
Marius Bancos
Follow
Oct 20
I checked 26 popular Node.js starters. 18 ship a high-severity vulnerability that npm update can't fix
#
node
#
javascript
#
security
#
npm
Comments
Add Comment
6 min read
Moderation
How I Choose a Library Before Adding It to a Project
Aleksandra Dudkina
Aleksandra Dudkina
Aleksandra Dudkina
Follow
Sep 15
How I Choose a Library Before Adding It to a Project
#
frontend
#
webdev
#
beginners
#
npm
2
 reactions
Comments
Add Comment
7 min read
Moderation
The 60-Second Check Before Every npm install
Khushi Trivedi
Khushi Trivedi
Khushi Trivedi
Follow
Oct 19
The 60-Second Check Before Every npm install
#
typosquatting
#
cybersecurity
#
npm
#
containersecurity
Comments
Add Comment
4 min read
Moderation
đź‘‹
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
We're a place where coders share, stay up-to-date and grow their careers.
Log in
Create account