Skip to content
Navigation menu
Search
Powered by Algolia
Search
Log in
Create account
DEV Community
Close
npm
Node Package Manager
Follow
Hide
Posts
Left menu
đ
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
Right menu
A hands-free npm publish pipeline for SignalK plugins
Bryan Clark
Bryan Clark
Bryan Clark
Follow
Jun 30
A hands-free npm publish pipeline for SignalK plugins
#
signalk
#
npm
#
oidc
#
trustedpublishing
Comments
Add Comment
8 min read
A Linux RAT in your npm install: what phi sees before it runs
Prosper Maxwell
Prosper Maxwell
Prosper Maxwell
Follow
Jun 30
A Linux RAT in your npm install: what phi sees before it runs
#
npm
#
security
#
devops
#
node
Comments
Add Comment
3 min read
Preserving Context When Moving from ChatGPT to Codex CLI
Viacheslav Bogdanov
Viacheslav Bogdanov
Viacheslav Bogdanov
Follow
Jun 30
Preserving Context When Moving from ChatGPT to Codex CLI
#
openai
#
npm
#
ai
#
cli
1
 reaction
Comments
Add Comment
3 min read
CI is the wrong place to first hear about your npm dependencies
Leo
Leo
Leo
Follow
Jun 29
CI is the wrong place to first hear about your npm dependencies
#
supplychain
#
shiftleft
#
node
#
npm
Comments
Add Comment
3 min read
These tools provide the engineering substrate required to meet the rigorous safety and economic constraints of production environments.
David C Cavalcante
David C Cavalcante
David C Cavalcante
Follow
Jun 29
These tools provide the engineering substrate required to meet the rigorous safety and economic constraints of production environments.
#
github
#
npm
#
typescript
1
 reaction
Comments
Add Comment
2 min read
Engineering production AI infrastructure requires moving beyond heuristic guesswork toward deterministic, verifiable logic
David C Cavalcante
David C Cavalcante
David C Cavalcante
Follow
Jun 29
Engineering production AI infrastructure requires moving beyond heuristic guesswork toward deterministic, verifiable logic
#
github
#
npm
#
typescript
1
 reaction
Comments
Add Comment
2 min read
ContextVault: Own Your AI Context Across Models, Agents, and Time
Mohammad Ali Abdul Wahed
Mohammad Ali Abdul Wahed
Mohammad Ali Abdul Wahed
Follow
Jun 27
ContextVault: Own Your AI Context Across Models, Agents, and Time
#
ai
#
opensource
#
npm
#
programming
Comments
Add Comment
9 min read
PostCSS Adopted Staged Publishing. 685M Weekly Downloads Now Gated.
Pico
Pico
Pico
Follow
Jun 27
PostCSS Adopted Staged Publishing. 685M Weekly Downloads Now Gated.
#
npm
#
security
#
supplychain
#
javascript
2
 reactions
Comments
1
 comment
2 min read
npm freezes high-impact maintainer accounts for 72 hours after a sensitive change
Leo
Leo
Leo
Follow
Jun 26
npm freezes high-impact maintainer accounts for 72 hours after a sensitive change
#
npm
#
supplychain
#
accounttakeover
#
security
Comments
Add Comment
4 min read
Nation-State Actors Are Now Targeting Your AI Agent's npm Packages
Toni Antunovic
Toni Antunovic
Toni Antunovic
Follow
Jun 25
Nation-State Actors Are Now Targeting Your AI Agent's npm Packages
#
security
#
npm
#
ai
#
devsecops
Comments
Add Comment
6 min read
A Rogue Registry in My Own Backyard: Anatomy of a Two-Line Supply Chain Attack
Sebastian SchĂŒrmann
Sebastian SchĂŒrmann
Sebastian SchĂŒrmann
Follow
Jun 27
A Rogue Registry in My Own Backyard: Anatomy of a Two-Line Supply Chain Attack
#
npm
#
security
#
supplychain
1
 reaction
Comments
Add Comment
6 min read
Moving from Migrate Mongo to Mongo Migrate Kit (mmk) Without Re Running Old Migrations
Santosh Gupta
Santosh Gupta
Santosh Gupta
Follow
Jun 25
Moving from Migrate Mongo to Mongo Migrate Kit (mmk) Without Re Running Old Migrations
#
database
#
mongodb
#
node
#
npm
Comments
Add Comment
2 min read
The New Standard for NPM Package Discovery: Deep Dive into LibPilot
Saiful Siam
Saiful Siam
Saiful Siam
Follow
Jun 24
The New Standard for NPM Package Discovery: Deep Dive into LibPilot
#
javascript
#
webdev
#
ai
#
npm
2
 reactions
Comments
Add Comment
3 min read
npm Dependencies: How to Evaluate a Library Before Shipping It to Production
Juan Torchia
Juan Torchia
Juan Torchia
Follow
Jun 22
npm Dependencies: How to Evaluate a Library Before Shipping It to Production
#
english
#
typescript
#
pnpm
#
npm
1
 reaction
Comments
Add Comment
8 min read
Most apps do not need a full date library, so I built a 2KB one
ë ë€ëì„
ë ë€ëì„
ë ë€ëì„
Follow
Jun 21
Most apps do not need a full date library, so I built a 2KB one
#
javascript
#
typescript
#
npm
#
opensource
Comments
Add Comment
3 min read
đ
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
We're a place where coders share, stay up-to-date and grow their careers.
Log in
Create account