DEV Community

npm

Node Package Manager

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Your npm install Is Doing More Than You Think

Your npm install Is Doing More Than You Think

1
Comments 2
7 min read
Infected by git pull and npm run build — Malware planted in a build config through a forged merge commit

Infected by git pull and npm run build — Malware planted in a build config through a forged merge commit

Comments 1
13 min read
CaptchaKit: A Self-Hosted CAPTCHA Package for React & Next.js + Try It Live

CaptchaKit: A Self-Hosted CAPTCHA Package for React & Next.js + Try It Live

5
Comments
1 min read
express-validator

express-validator

1
Comments
6 min read
AI Coding Assistants Invent Fake Packages 1 in 5 Times — Attackers Are Already Registering Them

AI Coding Assistants Invent Fake Packages 1 in 5 Times — Attackers Are Already Registering Them

Comments
2 min read
Modern Open-Source Maintenance: Secure Package Publishing, SemVer, and Automated Scanning

Modern Open-Source Maintenance: Secure Package Publishing, SemVer, and Automated Scanning

Comments
9 min read
A Supply-Chain Attack Hit Our Repos. Here's How We Locked Down GitHub So It Can't Happen Again

A Supply-Chain Attack Hit Our Repos. Here's How We Locked Down GitHub So It Can't Happen Again

Comments
3 min read
capsurface: reviewing capability changes in npm dependencies

capsurface: reviewing capability changes in npm dependencies

1
Comments
5 min read
The Shai-Hulud npm worm showed that opening a folder is enough to run code

The Shai-Hulud npm worm showed that opening a folder is enough to run code

Comments
3 min read
Good News For Backend And Devops Buddy

Good News For Backend And Devops Buddy

Comments
2 min read
Caching VAT and FX Rates at Build Time, Not on the Request Path

Caching VAT and FX Rates at Build Time, Not on the Request Path

Comments
8 min read
What a Job Take-Home Taught Me About npm Supply-Chain Attacks

What a Job Take-Home Taught Me About npm Supply-Chain Attacks

Comments 1
3 min read
Deno 2.6's minimum dependency age flag ignores year and month durations

Real-world tests reveal a silent CLI bug

Deno 2.6's minimum dependency age flag ignores year and month durations

12
Comments 6
8 min read
Navigating npm ERESOLVE Errors: A Strategic Guide for Engineering Leaders

Navigating npm ERESOLVE Errors: A Strategic Guide for Engineering Leaders

Comments
5 min read
How I Choose a Library Before Adding It to a Project

How I Choose a Library Before Adding It to a Project

2
Comments
7 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.