DEV Community

npm

Node Package Manager

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Deno 2.6's minimum dependency age flag ignores year and month durations

Real-world tests reveal a silent CLI bug

Deno 2.6's minimum dependency age flag ignores year and month durations

12
Comments 6
8 min read
🍬 Candy Logger v2.1.0 - The Correctness Release

🍬 Candy Logger v2.1.0 - The Correctness Release

Comments
7 min read
Publishing My First Rust npm Package (@seucra/matrix-sdk-bridge)

Publishing My First Rust npm Package (@seucra/matrix-sdk-bridge)

Comments
2 min read
An AI impersonated me

An AI impersonated me

1
Comments
2 min read
Introducing mutex-forge: Mutex & Semaphore for async JavaScript

Introducing mutex-forge: Mutex & Semaphore for async JavaScript

5
Comments 1
1 min read
Navigating npm ERESOLVE Errors: A Strategic Guide for Engineering Leaders

Navigating npm ERESOLVE Errors: A Strategic Guide for Engineering Leaders

Comments
5 min read
npm provenance attestations get worn as camouflage in a new worm-style attack

npm provenance attestations get worn as camouflage in a new worm-style attack

Comments
5 min read
npm Supply-Chain Hardening in 2026: Lifecycle Scripts, minimumReleaseAge, and the Postinstall I Stopped Trusting

npm Supply-Chain Hardening in 2026: Lifecycle Scripts, minimumReleaseAge, and the Postinstall I Stopped Trusting

Comments 2
7 min read
responsive-tailwind: The Utility That Refuses To Build Your Class Names

responsive-tailwind: The Utility That Refuses To Build Your Class Names

Comments
6 min read
I am just a developer 😭

I am just a developer 😭

1
Comments 1
2 min read
I Built a Website Crawler Because “It Works in the Browser” Isn’t Enough

I Built a Website Crawler Because “It Works in the Browser” Isn’t Enough

Comments 3
4 min read
The GITHUB_TOKEN in Your .zshrc Is a Time Bomb (And So Is Your .npmrc)

The GITHUB_TOKEN in Your .zshrc Is a Time Bomb (And So Is Your .npmrc)

Comments
5 min read
ng update: Because Peace Was Never an Option 😂

ng update: Because Peace Was Never an Option 😂

6
Comments 4
1 min read
When ‘Are We Affected?’ Requires Reconstructing Yesterday’s npm Install

When ‘Are We Affected?’ Requires Reconstructing Yesterday’s npm Install

1
Comments
3 min read
Why npm & pnpm audit miss vulnerabilities

Why npm & pnpm audit miss vulnerabilities

Comments
3 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.