Visitar URL original
npm - DEV Community

DEV Community

npm

Node Package Manager

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Publish a public artifact portal: anonymous /explore install commands
wenping profile

Publish a public artifact portal: anonymous /explore install commands

#angusrepo #harbor #docker #npm
2
Comments
4 min read
I counted the strangers inside famous npm dependency trees
princejain756 profile

I counted the strangers inside famous npm dependency trees

#npm #security #opensource #tooling
Comments
2 min read
Zod Got Backdoored. Your Lockfile Didn't Save You, Luck Did.
ashraf_chowdury09 profile

Zod Got Backdoored. Your Lockfile Didn't Save You, Luck Did.

#security #javascript #npm #webdev
Comments
3 min read
Our stylesheet was quietly restyling our users' apps. It took us weeks to notice.
angelbot_ai profile

Our stylesheet was quietly restyling our users' apps. It took us weeks to notice.

#css #javascript #webdev #npm
1
Comments
4 min read
AI Keeps Recommending Fake Packages. I Checked Which Ones Are Still Sitting Open.
ronin13 profile

AI Keeps Recommending Fake Packages. I Checked Which Ones Are Still Sitting Open.

#discuss #ai #security #npm
Comments
7 min read
MemTensor: When an AI Memory Plugin Becomes the Credential Collector
bianliang profile

MemTensor: When an AI Memory Plugin Becomes the Credential Collector

#supplychain #npm #pypi #aiagents
Comments
2 min read
The npm Worm Era: Why Package Signatures Did Not Stop Shai-Hulud
onaeiuspkz profile

The npm Worm Era: Why Package Signatures Did Not Stop Shai-Hulud

#supplychain #npm #cicd #secrets
Comments
3 min read
I made string-range-tokens (srTokens) — here’s what to use it for
figsh profile

I made string-range-tokens (srTokens) — here’s what to use it for

#javascript #typescript #npm #opensource
Comments
4 min read
Fix: @prisma/client did not initialize yet (Prisma 6 and 7)
nils44344 profile

Fix: @prisma/client did not initialize yet (Prisma 6 and 7)

#prisma #npm #node #database
Comments
5 min read
I checked 2,905 npm packages with 1M+ weekly downloads. 887 haven't shipped a release in over a year.
pennyforgehq profile

I checked 2,905 npm packages with 1M+ weekly downloads. 887 haven't shipped a release in over a year.

#javascript #npm #data #security
Comments
6 min read
Auto-allow npm scripts in Claude Code without allowing npm install
aicoding-guide profile

Auto-allow npm scripts in Claude Code without allowing npm install

#claudecode #permissions #npm #pnpm
Comments 1
3 min read
Publishing SDKs to npm, PyPI, Maven Central and the rest
octri profile
Octri

Publishing SDKs to npm, PyPI, Maven Central and the rest

#api #npm #programming #openapi
Comments
4 min read
Next.js 16.3 vulnerabilities: which version is patched?
nils44344 profile

Next.js 16.3 vulnerabilities: which version is patched?

#nextjs #security #npm #webdev
Comments
5 min read
Shai-Hulud Just Infected an AI Agent Platform's npm Package — What Self-Hosted n8n Builders Must Do Now
cortexflow_tech profile

Shai-Hulud Just Infected an AI Agent Platform's npm Package — What Self-Hosted n8n Builders Must Do Now

#n8n #supplychain #security #npm
Comments
7 min read
The Proactive Shift: How npm's Scan-and-Prevent Model is Securing Your Software Supply Chain
devactivity profile
Oleg

The Proactive Shift: How npm's Scan-and-Prevent Model is Securing Your Software Supply Chain

#npm #security #supplychain #opensource
Comments
5 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.