Skip to content

Forem

npm

Node Package Manager

👋 Sign in for the ability to sort posts by relevant, latest, or top.

RC

Apr 20

Axios Compromise: What Actually Happened

#cybersecurity #supplychainattack #npm #dependencysecurity

4 min read

RC

Apr 20

Malicious axios Update Exploits Dependency Trust Model

#cybersecurity #npm #dependencysecurity #supplychainattack

3 min read

Vincenzo Rubino

Apr 20

The Hidden Cost of AI Coding Agents: Every Tool Is Fetching the Same Data

#ai #api #npm #python

6 min read

Apr 24

I built Inklin because I wanted a better terminal styling experience for Node.js

#javascript #npm #node

2 min read

Cover image for Bun replaced 4 tools in my stack — here's what actually held up and what didn't

Deveshwar Jaiswal

Apr 19

Bun replaced 4 tools in my stack — here's what actually held up and what didn't

#bunjs #npm #webdev #programming

2 min read

Bill Tu

Apr 20

Did Your Fix Actually Work? Comparing Profiling Reports Before and After

#javascript #npm #node #eventloop

4 min read

Pico

Apr 18

How Commit Scores npm Packages: The Methodology Behind getcommit.dev/audit

#javascript #npm #security #opensource

9 min read

Pico

Apr 18

MCPwn Is Live. We Scanned the Supply Chains of 14 MCP Servers.

#security #mcp #supplychain #npm

5 min read

Pico

Apr 17

I audited every npm package with >10M weekly downloads. Here is the risk map.

#security #npm #javascript #devops

4 min read

Pico

Apr 17

Your package.json only shows 20 dependencies. Your lock file has 487. I built a scanner for the other 467.

#npm #security #node #javascript

2 min read

Pico

Apr 17

esbuild has 190M weekly downloads and one maintainer — I audited 25 top npm packages

#npm #security #javascript #devops

3 min read

Cover image for I stopped waiting for backend APIs - localmockdb made frontend development easier

Apr 21

I stopped waiting for backend APIs - localmockdb made frontend development easier

#npm #localstorage #mockdb #restapi

4 min read

Pico

Apr 16

I audited 25 top npm packages with a zero-install CLI. Here's who passes.

#npm #javascript #security #opensource

3 min read

Malthus AMETEPE

Apr 16

thusdev-fetch atteint 256 téléchargements npm en 2 jours !

#node #javascript #opensource #npm

1 min read

Apr 14

My AI told me to pip install a package that doesn't exist. Turns out someone already weaponized that.

#ai #npm #security #testing

2 min read

👋 Sign in for the ability to sort posts by relevant, latest, or top.