DEV Community

npm

Node Package Manager

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
express-validator

express-validator

1
Comments
6 min read
None of the Big Package Registries Can Tell You If a Dependency Is Abandoned

None of the Big Package Registries Can Tell You If a Dependency Is Abandoned

Comments 2
7 min read
74 minutes before the advisory: graph triage for npm account hijacks

74 minutes before the advisory: graph triage for npm account hijacks

Comments
9 min read
AI Coding Assistants Invent Fake Packages 1 in 5 Times — Attackers Are Already Registering Them

AI Coding Assistants Invent Fake Packages 1 in 5 Times — Attackers Are Already Registering Them

Comments
2 min read
Modern Open-Source Maintenance: Secure Package Publishing, SemVer, and Automated Scanning

Modern Open-Source Maintenance: Secure Package Publishing, SemVer, and Automated Scanning

Comments
9 min read
npm Explained: The Package Manager Behind JavaScript

npm Explained: The Package Manager Behind JavaScript

Comments
2 min read
A Supply-Chain Attack Hit Our Repos. Here's How We Locked Down GitHub So It Can't Happen Again

A Supply-Chain Attack Hit Our Repos. Here's How We Locked Down GitHub So It Can't Happen Again

Comments
3 min read
capsurface: reviewing capability changes in npm dependencies

capsurface: reviewing capability changes in npm dependencies

1
Comments
5 min read
Good News For Backend And Devops Buddy

Good News For Backend And Devops Buddy

Comments
2 min read
How npm worms steal your credentials, and the order to rotate them in

How npm worms steal your credentials, and the order to rotate them in

Comments 4
7 min read
Caching VAT and FX Rates at Build Time, Not on the Request Path

Caching VAT and FX Rates at Build Time, Not on the Request Path

Comments
8 min read
What a Job Take-Home Taught Me About npm Supply-Chain Attacks

What a Job Take-Home Taught Me About npm Supply-Chain Attacks

Comments 1
3 min read
I checked 26 popular Node.js starters. 18 ship a high-severity vulnerability that npm update can't fix

I checked 26 popular Node.js starters. 18 ship a high-severity vulnerability that npm update can't fix

Comments
6 min read
How I Choose a Library Before Adding It to a Project

How I Choose a Library Before Adding It to a Project

2
Comments
7 min read
The 60-Second Check Before Every npm install

The 60-Second Check Before Every npm install

Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.