DEV Community

npm

Node Package Manager

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
I Built a Toast Library for React & Next.js — Here’s How It Works 🍞

I Built a Toast Library for React & Next.js — Here’s How It Works 🍞

1
Comments
4 min read
Is that free data grid free for your project? Checks you can run in a terminal

Is that free data grid free for your project? Checks you can run in a terminal

1
Comments
4 min read
I Wanted to Pay My Dependencies. Only One of Three Registries Would Let Me Find Out Who to Pay.

I Wanted to Pay My Dependencies. Only One of Three Registries Would Let Me Find Out Who to Pay.

Comments
8 min read
The Shai-Hulud npm worm showed that opening a folder is enough to run code

The Shai-Hulud npm worm showed that opening a folder is enough to run code

Comments
3 min read
Good News For Backend And Devops Buddy

Good News For Backend And Devops Buddy

Comments
2 min read
Caching VAT and FX Rates at Build Time, Not on the Request Path

Caching VAT and FX Rates at Build Time, Not on the Request Path

Comments
8 min read
What a Job Take-Home Taught Me About npm Supply-Chain Attacks

What a Job Take-Home Taught Me About npm Supply-Chain Attacks

Comments 1
3 min read
Deno 2.6's minimum dependency age flag ignores year and month durations

Real-world tests reveal a silent CLI bug

Deno 2.6's minimum dependency age flag ignores year and month durations

12
Comments 6
8 min read
Navigating npm ERESOLVE Errors: A Strategic Guide for Engineering Leaders

Navigating npm ERESOLVE Errors: A Strategic Guide for Engineering Leaders

Comments
5 min read
How I Choose a Library Before Adding It to a Project

How I Choose a Library Before Adding It to a Project

2
Comments
7 min read
An AI impersonated me

An AI impersonated me

1
Comments
2 min read
Why we moved our Backstage platform from Yarn to pnpm

Why we moved our Backstage platform from Yarn to pnpm

Comments
12 min read
Stop installing 6 security packages for every Node API

Stop installing 6 security packages for every Node API

Comments
1 min read
npm Supply-Chain Hardening in 2026: Lifecycle Scripts, minimumReleaseAge, and the Postinstall I Stopped Trusting

npm Supply-Chain Hardening in 2026: Lifecycle Scripts, minimumReleaseAge, and the Postinstall I Stopped Trusting

Comments 2
7 min read
How npm typosquatting and dependency confusion attacks work (and how to stop them)

How npm typosquatting and dependency confusion attacks work (and how to stop them)

Comments 1
3 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.