Skip to content
Standard Reader
Log in
Tag

Npm

Articles and publications tagged Npm across the Atmosphere.

36articles21publications
ivanova
ivanovaNov 3, 2026
A Monitoring Playbook for the Next MALFEX-Style Package
A staged monitoring and response exercise for MALFEX-style package replacement campaigns.
incident responsenpm
Svenssons Nyheter
Svenssons NyheterOct 30, 2026
Det kvittar vad vi har för regering om vi inte tar konflikter
Det kvittar vad vi har för regering så länge vi inte själva vågar ta konflikter. Maktutövning innebär en förhandling mellan olika maktcentra. Vart och ett vågar vara så krävande och envist som det känner det har stöd för från sina uppdragsgivare.
KampKollektiv
jeffreyciend
jeffreyciendOct 24, 2026
Two npm Bugs, One Lesson: Upgrading the Runtime Is Not Upgrading the Dependencies
A JWT library that can be talked into using a public key as an HMAC secret, and a decompression library that follows symlinks out of the target directory. Both have fixes; neither is fixed by upgrading Node.
npmjwt
ioneyrezende
ioneyrezendeOct 24, 2026
The fast-jwt fix for algorithm confusion missed the prefix
CVE-2026-107722 reopens RSA to HS256 algorithm confusion in fast-jwt 6.2.x because PEM detection trims whitespace while the header matcher stays start-anchored.
jwtauthentication
Blog - Blog
Blog - BlogAug 25, 2026
JS : Vitest killed Jest
first graphsecond graph
Angular-Buch
Angular-BuchAug 13, 2026
Angular mit pnpm: sichere Dependencys und Best Practices
Die Zeiten, in denen der Paketmanager npm alternativlos war, sind längst vorbei. Mit pnpm steht ein alternativer Paketmanager zur Verfügung, der effizienter mit Speicherplatz umgeht, schneller installiert und moderne Sicherheitsmechanismen gegen Supply-Chain-Angriffe mitbringt.
Angularpnpm
Andrew Nesbitt
Andrew NesbittJul 28, 2026
Why npm Dependency Trees Are So Big
Two versions of lodash walk into a tree
package-managersnpm
TIL Tech
TIL TechJul 20, 2026
TYL: npx setup-trusted-publishing
That's Today You Learnt instead of Today I Learned, enjoy!
3
node.jsnpm
oh hey, it's owais
oh hey, it's owaisJun 23, 2026
Web 1.0 Components
Dev Log 58: 2026-06-22
3
LitTypeScript
Andrew Nesbitt
Andrew NesbittApr 16, 2026
Features everyone should steal from npmx
What happens when users design their own package registry frontend
package-managersnpm
Andrew Nesbitt
Andrew NesbittMar 31, 2026
npm's Defaults Are Bad
The npm client's default settings are a root cause of JavaScript's recurring supply chain security problems.
package-managersjavascript
Andrew Nesbitt
Andrew NesbittFeb 28, 2026
npm Data Subject Access Request
A response to a GDPR data subject access request.
package-managersnpm
Andrew Nesbitt
Andrew NesbittFeb 14, 2026
Package Management Namespaces
Comparing namespace models across npm, Maven, Go, Swift, and crates.io.
package-managersregistries
Andrew Nesbitt
Andrew NesbittJan 5, 2026
The Nine Levels of JavaScript Dependency Hell
Come, I will show you what I have seen.
package-managersjavascript
Andrew Nesbitt
Andrew NesbittDec 19, 2025
Why JavaScript Needed Docker
How Docker became JavaScript's real lockfile
package-managersnpm
lesser daemon
lesser daemonOct 2, 2025
Fixing NPM permissions errors on WSL
Saving this one for posterity since I seem to run into something like this once every couple of months. Really gotta get a Mac for my next dev machine. sudo apt update && sudo apt upgrade -y # Since you mention that you have set your user to be root: sudo sh -c 'echo "[user]\ndefault=root" > /etc/wsl.conf' wsl.exe -l -v # Confirm your distribution name for the following command: wsl.exe --terminate Ubuntu Credit to this StackOverflow answer.
tilwsl
Devtools FM
Devtools FMSep 21, 2025
Zoltan Kochan - PNPM and the Future of Package Management
Zoltan Kochan, PNPM's lead maintainer, explores how his revolutionary package manager transformed JavaScript dependency management with speed and superior developer experience.
pnpmpackage manager
nove-b blog
nove-b blogJul 4, 2025
npxは永続的なインストールは行わないが、実行のために一時的なダウンロード（実質的なインストール）は行う
npxnpm
Devtools FM
Devtools FMMay 12, 2025
James Garbutt - E18e
James Garbutt explains e18e, the community initiative focused on improving JavaScript package performance across the entire npm ecosystem.
JavaScriptperformance
Ryosuke's Sketchbook
Ryosuke's SketchbookApr 23, 2025
Releasing a React Library in 2025
reactvite
Devtools FM
Devtools FMJan 12, 2025
Darcy Clarke - npm, vlt and the Future of JavaScript Package Management
Darcy Clarke introduces VLT, a new JavaScript package manager aiming to disrupt npm with innovative features and VSR registry.
javascriptnpm
Patrick's Blog
Patrick's BlogNov 26, 2024
Adding Comments to My Blog with Bluesky!
blueskysoftware-development
Devtools FM
Devtools FMAug 25, 2024
Jordan Harband - Npm Ecosystem, HeroDevs
Jordan Harband defends his controversial stance on legacy support while managing countless npm packages that power millions of JavaScript projects.
npmecosystem
Devtools FM
Devtools FMJan 15, 2024
Feross Aboukhadijeh - Socket
Feross Aboukhadijeh discusses Socket.dev's advanced approach to open source security, using static analysis and AI to detect complex vulnerabilities.
securityopen source