Skip to content

Standard Reader

Tag

Dependency-management

Articles and publications tagged Dependency-management across the Atmosphere.

1article1publication

Articles

Publications

jeffreyciend

jeffreyciendOct 24, 2026

Two npm Bugs, One Lesson: Upgrading the Runtime Is Not Upgrading the Dependencies

A JWT library that can be talked into using a public key as an HMAC secret, and a decompression library that follows symlinks out of the target directory. Both have fixes; neither is fixed by upgrading Node.

You've reached the end.