Skip to content

DEV Community

npm

Node Package Manager

👋 Sign in for the ability to sort posts by relevant, latest, or top.

Pico

Apr 17

I audited every npm package with >10M weekly downloads. Here is the risk map.

#security #npm #javascript #devops

4 min read

Pico

Apr 17

esbuild has 190M weekly downloads and one maintainer — I audited 25 top npm packages

#npm #security #javascript #devops

3 min read

Monde kim

Apr 16

Launching gh-dep-risk: a GitHub CLI extension for npm dependency PR review

#github #cli #security #npm

1 min read

Malthus AMETEPE

Apr 16

thusdev-fetch atteint 256 téléchargements npm en 2 jours !

#node #javascript #opensource #npm

1 min read

Apr 14

My AI told me to pip install a package that doesn't exist. Turns out someone already weaponized that.

#ai #npm #security #testing

2 min read

Apr 14

Le migliori librerie di notifiche per React Native nel 2026: quale scegliere?

#reactnative #react #opensource #npm

7 min read

SEN LLC

Apr 15

npm audit --json Is Unreadable. I Wrote a Formatter With Zero Dependencies.

#typescript #npm #security #tutorial

8 min read

LazyDev_OH

Apr 14

axios npm Supply Chain Attack (March 31, 2026) — What Happened and How to Check Your Lock File Right Now

#security #npm #javascript #webdev

6 min read

Apr 13

All It Took Was npm install (Axios Attack)

#npm #webdev #cybersecurity #node

4 min read

Bill Tu

Apr 13

Completing the Picture: Adding Memory Diagnostics to a CPU Profiler

#npm #node #javascript

6 min read

Ja

Apr 13

Signals, Effects, and the Algebra Between Them

#typescript #npm #datastructures #node

6 min read

The Crypto Donkey

Apr 13

I audited the top 50 npm packages. Almost none ship with supply-chain attestations!

#webdev #javascript #security #npm

10 min read

אחיה כהן

Apr 11

I just hardened my OSS release pipeline to 11 layers of security — here's the playbook

#opensource #security #github #npm

7 min read

Pavel Kostromin

Apr 11

Rust Binary Distribution via npm: Addressing Security Risks and Installation Failures with Native Caching Solutions

#rust #npm #security #distribution

12 min read

Apr 11

I published mfkvault-cli to npm — install any AI skill in 30 seconds

#claude #ai #npm #productivity

1 min read

👋 Sign in for the ability to sort posts by relevant, latest, or top.