Forem

npm

Node Package Manager

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Auto-Configure Git Hooks for Your Entire Team with Just npm install

Auto-Configure Git Hooks for Your Entire Team with Just npm install

Comments
3 min read
10 npm Packages You'll Actually Use in 2026
Cover image for 10 npm Packages You'll Actually Use in 2026

10 npm Packages You'll Actually Use in 2026

Comments
5 min read
I built a 100-point prompt scorer for SUNO AI — 16 checks, open-source on npm

I built a 100-point prompt scorer for SUNO AI — 16 checks, open-source on npm

Comments
3 min read
How to Compare package.json Files: A Node.js Developer's Guide

How to Compare package.json Files: A Node.js Developer's Guide

1
Comments
4 min read
✦ Phrolova Baileys ✦

✦ Phrolova Baileys ✦

Comments
3 min read
How We Strengthened Dependency Security in Our Monorepo
Cover image for How We Strengthened Dependency Security in Our Monorepo

How We Strengthened Dependency Security in Our Monorepo

Comments
3 min read
Axios Compromise: What Actually Happened

Axios Compromise: What Actually Happened

Comments
4 min read
Malicious axios Update Exploits Dependency Trust Model

Malicious axios Update Exploits Dependency Trust Model

Comments
3 min read
The Hidden Cost of AI Coding Agents: Every Tool Is Fetching the Same Data

The Hidden Cost of AI Coding Agents: Every Tool Is Fetching the Same Data

Comments
6 min read
Bun replaced 4 tools in my stack — here's what actually held up and what didn't
Cover image for Bun replaced 4 tools in my stack — here's what actually held up and what didn't

Bun replaced 4 tools in my stack — here's what actually held up and what didn't

Comments
2 min read
Did Your Fix Actually Work? Comparing Profiling Reports Before and After

Did Your Fix Actually Work? Comparing Profiling Reports Before and After

1
Comments
4 min read
How Commit Scores npm Packages: The Methodology Behind getcommit.dev/audit

How Commit Scores npm Packages: The Methodology Behind getcommit.dev/audit

Comments
9 min read
MCPwn Is Live. We Scanned the Supply Chains of 14 MCP Servers.

MCPwn Is Live. We Scanned the Supply Chains of 14 MCP Servers.

Comments 2
5 min read
I audited every npm package with >10M weekly downloads. Here is the risk map.

I audited every npm package with >10M weekly downloads. Here is the risk map.

Comments
4 min read
Your package.json only shows 20 dependencies. Your lock file has 487. I built a scanner for the other 467.

Your package.json only shows 20 dependencies. Your lock file has 487. I built a scanner for the other 467.

Comments
2 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.