DEV Community

npm

Node Package Manager

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
When npmjs is flaky in China: switch to a team registry with PROXY cache

When npmjs is flaky in China: switch to a team registry with PROXY cache

Comments
5 min read
Start a free cloud npm private registry: from publish to public distribution

Start a free cloud npm private registry: from publish to public distribution

Comments
6 min read
npm Supply-Chain Attacks: What the Chalk and Shai-Hulud Incidents Mean for Your App

npm Supply-Chain Attacks: What the Chalk and Shai-Hulud Incidents Mean for Your App

Comments
5 min read
Infected by git pull and npm run build — Malware planted in a build config through a forged merge commit

Infected by git pull and npm run build — Malware planted in a build config through a forged merge commit

Comments 1
13 min read
Before You npx an MCP Server: 8 Checks That Would Have Caught the Fake REA Repo

Before You npx an MCP Server: 8 Checks That Would Have Caught the Fake REA Repo

1
Comments 1
10 min read
The One-Line Package That Broke create-react-app

The One-Line Package That Broke create-react-app

3
Comments 2
5 min read
Chron passed 10,000 npm downloads on September 30th. 10,158 as of this morning

Chron passed 10,000 npm downloads on September 30th. 10,158 as of this morning

Comments 2
5 min read
I Ran `npm fund` and Found 47 Packages Keeping My App Alive

I Ran `npm fund` and Found 47 Packages Keeping My App Alive

Comments
3 min read
Stop installing 6 security packages for every Node API

Stop installing 6 security packages for every Node API

Comments
1 min read
How to Validate Sri Lankan NIC Numbers, Phone Numbers, and LKR Amounts.

How to Validate Sri Lankan NIC Numbers, Phone Numbers, and LKR Amounts.

1
Comments
9 min read
How npm typosquatting and dependency confusion attacks work (and how to stop them)

How npm typosquatting and dependency confusion attacks work (and how to stop them)

Comments 1
3 min read
Finding the second copy of React that npm ls cannot see

Finding the second copy of React that npm ls cannot see

Comments 6
2 min read
How to set up a private npm registry: from install to .npmrc, scope, and publish

How to set up a private npm registry: from install to .npmrc, scope, and publish

1
Comments
6 min read
Publish a public artifact portal: anonymous /explore install commands

Publish a public artifact portal: anonymous /explore install commands

2
Comments
4 min read
I counted the strangers inside famous npm dependency trees

I counted the strangers inside famous npm dependency trees

Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.