DEV Community

npm

Node Package Manager

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
npm Explained: The Package Manager Behind JavaScript

npm Explained: The Package Manager Behind JavaScript

Comments
2 min read
Three gates before your first npm publish: 2FA, provenance, and staged releases

Three gates before your first npm publish: 2FA, provenance, and staged releases

1
Comments
6 min read
Why I Built bunpm: Route npm, yarn & pnpm Through Bun Without Touching Your Scripts

Why I Built bunpm: Route npm, yarn & pnpm Through Bun Without Touching Your Scripts

1
Comments
2 min read
I Found 53 Real Email Addresses Behind One Tiny npm Package

I Found 53 Real Email Addresses Behind One Tiny npm Package

Comments
7 min read
A maintained package can still ship malware. What a health check can and can't see.

A maintained package can still ship malware. What a health check can and can't see.

Comments 2
11 min read
Three bugs my npm packages shipped, and the checks that catch them now

Three bugs my npm packages shipped, and the checks that catch them now

Comments
3 min read
npm Security Advisories Withdrawn for Popular Packages, Questioning Automated Audit Reliability

npm Security Advisories Withdrawn for Popular Packages, Questioning Automated Audit Reliability

Comments
9 min read
How I automated npm dependency upgrades with an AI skill

How I automated npm dependency upgrades with an AI skill

Comments
6 min read
Bear UI 1.3.5 — charts, AI, code, maps, and kanban now have their own packages

Bear UI 1.3.5 — charts, AI, code, maps, and kanban now have their own packages

Comments
3 min read
Two npm Bugs, One Lesson: Upgrading the Runtime Is Not Upgrading the Dependencies

Two npm Bugs, One Lesson: Upgrading the Runtime Is Not Upgrading the Dependencies

Comments 1
4 min read
The fast-jwt fix for algorithm confusion missed the prefix

The fast-jwt fix for algorithm confusion missed the prefix

Comments
5 min read
OpenClaw got 591 advisories. 1 in 4 top npm installs is the real hole

OpenClaw got 591 advisories. 1 in 4 top npm installs is the real hole

Comments
15 min read
Two Worms, One Blind Spot

Two Worms, One Blind Spot

Comments
3 min read
Is this project npm, pnpm, Yarn 1 or Yarn 4? How to tell, and why Yarn is the tricky one

Is this project npm, pnpm, Yarn 1 or Yarn 4? How to tell, and why Yarn is the tricky one

Comments
4 min read
10 TypeScript files, 5 SDK artefacts: typed in Node and Deno

10 TypeScript files, 5 SDK artefacts: typed in Node and Deno

Comments
5 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.