close

DEV Community

npm

Node Package Manager

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
How I Choose a Library Before Adding It to a Project

How I Choose a Library Before Adding It to a Project

BERJAYA BERJAYA 2
Comments
7 min read
Why we moved our Backstage platform from Yarn to pnpm

Why we moved our Backstage platform from Yarn to pnpm

Comments
12 min read
Stop installing 6 security packages for every Node API

Stop installing 6 security packages for every Node API

Comments
1 min read
npm Supply-Chain Hardening in 2026: Lifecycle Scripts, minimumReleaseAge, and the Postinstall I Stopped Trusting

npm Supply-Chain Hardening in 2026: Lifecycle Scripts, minimumReleaseAge, and the Postinstall I Stopped Trusting

Comments 2
7 min read
How npm typosquatting and dependency confusion attacks work (and how to stop them)

How npm typosquatting and dependency confusion attacks work (and how to stop them)

Comments 1
3 min read
I Built a Website Crawler Because “It Works in the Browser” Isn’t Enough

I Built a Website Crawler Because “It Works in the Browser” Isn’t Enough

Comments 2
4 min read
Why npm & pnpm audit miss vulnerabilities

Why npm & pnpm audit miss vulnerabilities

Comments
3 min read
Building Better PDF Workflows in Vue 3 with vue-pdf-export

Building Better PDF Workflows in Vue 3 with vue-pdf-export

Comments 1
1 min read
Apple just shipped a foldable iPhone. Our websites are not ready.

Apple just shipped a foldable iPhone. Our websites are not ready.

Comments 1
2 min read
I built vue-pdf-export - a Vue 3 PDF Export library for real-world browser apps

I built vue-pdf-export - a Vue 3 PDF Export library for real-world browser apps

Comments 1
2 min read
One client, four registries: PyPI, npm, Packagist and MCP all disagree

One client, four registries: PyPI, npm, Packagist and MCP all disagree

Comments 1
4 min read
You Cannot Tell It Does Not Ship Until You Ship It

You Cannot Tell It Does Not Ship Until You Ship It

Comments
4 min read
18 malicious npm packages are still remote-controlling AI coding agents (verified today)

18 malicious npm packages are still remote-controlling AI coding agents (verified today)

Comments
7 min read
Three things that surprised me shipping a 200-line npm package

Three things that surprised me shipping a 200-line npm package

BERJAYA 2
Comments
4 min read
I am just a developer 😭

I am just a developer 😭

BERJAYA 1
Comments 1
2 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.