Skip to content
Navigation menu
Search
Powered by Algolia
Search
Log in
Create account
DEV Community
Close
npm
Node Package Manager
Follow
Hide
Posts
Left menu
đ
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
Right menu
CI is the wrong place to first hear about your npm dependencies
Leo
Leo
Leo
Follow
Jun 29
CI is the wrong place to first hear about your npm dependencies
#
supplychain
#
shiftleft
#
node
#
npm
Comments
Add Comment
3 min read
These tools provide the engineering substrate required to meet the rigorous safety and economic constraints of production environments.
David C Cavalcante
David C Cavalcante
David C Cavalcante
Follow
Jun 29
These tools provide the engineering substrate required to meet the rigorous safety and economic constraints of production environments.
#
github
#
npm
#
typescript
1
 reaction
Comments
Add Comment
2 min read
Engineering production AI infrastructure requires moving beyond heuristic guesswork toward deterministic, verifiable logic
David C Cavalcante
David C Cavalcante
David C Cavalcante
Follow
Jun 29
Engineering production AI infrastructure requires moving beyond heuristic guesswork toward deterministic, verifiable logic
#
github
#
npm
#
typescript
1
 reaction
Comments
Add Comment
2 min read
ContextVault: Own Your AI Context Across Models, Agents, and Time
Mohammad Ali Abdul Wahed
Mohammad Ali Abdul Wahed
Mohammad Ali Abdul Wahed
Follow
Jun 27
ContextVault: Own Your AI Context Across Models, Agents, and Time
#
ai
#
opensource
#
npm
#
programming
Comments
Add Comment
9 min read
PostCSS Adopted Staged Publishing. 685M Weekly Downloads Now Gated.
Pico
Pico
Pico
Follow
Jun 27
PostCSS Adopted Staged Publishing. 685M Weekly Downloads Now Gated.
#
npm
#
security
#
supplychain
#
javascript
2
 reactions
Comments
1
 comment
2 min read
npm freezes high-impact maintainer accounts for 72 hours after a sensitive change
Leo
Leo
Leo
Follow
Jun 26
npm freezes high-impact maintainer accounts for 72 hours after a sensitive change
#
npm
#
supplychain
#
accounttakeover
#
security
Comments
Add Comment
4 min read
Nation-State Actors Are Now Targeting Your AI Agent's npm Packages
Toni Antunovic
Toni Antunovic
Toni Antunovic
Follow
Jun 25
Nation-State Actors Are Now Targeting Your AI Agent's npm Packages
#
security
#
npm
#
ai
#
devsecops
Comments
Add Comment
6 min read
Moving from Migrate Mongo to Mongo Migrate Kit (mmk) Without Re Running Old Migrations
Santosh Gupta
Santosh Gupta
Santosh Gupta
Follow
Jun 25
Moving from Migrate Mongo to Mongo Migrate Kit (mmk) Without Re Running Old Migrations
#
database
#
mongodb
#
node
#
npm
Comments
Add Comment
2 min read
I Added an MCP Server to NPMScan for AI Coding Agents
block_hacks
block_hacks
block_hacks
Follow
Jul 28
I Added an MCP Server to NPMScan for AI Coding Agents
#
mcp
#
claude
#
npm
#
security
Comments
2
 comments
2 min read
The New Standard for NPM Package Discovery: Deep Dive into LibPilot
Saiful Siam
Saiful Siam
Saiful Siam
Follow
Jun 24
The New Standard for NPM Package Discovery: Deep Dive into LibPilot
#
javascript
#
webdev
#
ai
#
npm
2
 reactions
Comments
Add Comment
3 min read
npm Dependencies: How to Evaluate a Library Before Shipping It to Production
Juan Torchia
Juan Torchia
Juan Torchia
Follow
Jun 22
npm Dependencies: How to Evaluate a Library Before Shipping It to Production
#
english
#
typescript
#
pnpm
#
npm
1
 reaction
Comments
Add Comment
8 min read
Most apps do not need a full date library, so I built a 2KB one
ë ë€ëì„
ë ë€ëì„
ë ë€ëì„
Follow
Jun 21
Most apps do not need a full date library, so I built a 2KB one
#
javascript
#
typescript
#
npm
#
opensource
Comments
Add Comment
3 min read
Five days with eventferry â MySQL, SQL Server, MSK IAM, and a core that didn't move
Samet GOKTEPE
Samet GOKTEPE
Samet GOKTEPE
Follow
Jun 20
Five days with eventferry â MySQL, SQL Server, MSK IAM, and a core that didn't move
#
node
#
kafka
#
typescript
#
npm
Comments
Add Comment
8 min read
npm v12 stopped running install scripts. Which ones do you approve? A real audit walkthrough
Christo
Christo
Christo
Follow
Jul 21
npm v12 stopped running install scripts. Which ones do you approve? A real audit walkthrough
#
npm
#
security
#
javascript
#
node
1
 reaction
Comments
3
 comments
4 min read
Your package-lock.json diff is unreadable. That's a supply-chain problem.
benjamin
benjamin
benjamin
Follow
Jun 17
Your package-lock.json diff is unreadable. That's a supply-chain problem.
#
showdev
#
security
#
npm
#
opensource
Comments
Add Comment
3 min read
đ
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
We're a place where coders share, stay up-to-date and grow their careers.
Log in
Create account