NPM

Explore the Topic

Publishing Packages

Step-by-step guides to creating, building, and publishing npm packages with TypeScript and other tools.

Understanding Package Managers

Guides to how npm, pnpm, and other tools manage dependencies, versions, and the node_modules folder.

npm Security Risks

Examinations of supply chain attacks, malicious packages, and security vulnerabilities affecting npm users.

Latest stories

Level Up Coding

lassiecoder

11h ago

React Native build failed? Find the real Error in your logs

A free, open-source CLI that reads React Native and Expo build logs (Gradle, Xcode, CocoaPods, Metro, logcat) and shows the real error, the…

Backend Engineers Club

Anas Issath

1d ago

The One-Line Package That Broke create-react-app

A tiny npm library shipped a “minor” release and broke some of the biggest JavaScript tools for three hours. What it teaches every backend…

Anderson Henrique Botega

1d ago

Dependency Confusion in JavaScript: How I Would Attack and Defend a Modern Project

The attack needs no exploit and no stolen credentials, only a package name and a version number.

Andersen IT Community

Margarita Zakharova

1d ago

Why pnpm Exists: Rethinking node_modules

If you work with JavaScript or TypeScript, npm install was probably one of the first commands you learned. It is simple, familiar, and…

Evangelist Naval

2d ago

How to get Slack alerts when an npm (or PyPI) package you use ships a new version

The registry already showed 4.2.0. Our worker found out from timeouts. Here’s how I get new versions of the packages we depend on into…

See more stories

NPM

Explore the Topic

Package DevelopmentCreating, configuring, and publishing packages for the npm ecosystem.

Publishing Packages

Package Management FundamentalsExplanations of how npm and alternative package managers organize and handle dependencies.

Understanding Package Managers

Security and Supply ChainDebates and analysis of security vulnerabilities, attacks, and risks in the npm ecosystem.

npm Security Risks

Latest stories

React Native build failed? Find the real Error in your logs

A free, open-source CLI that reads React Native and Expo build logs (Gradle, Xcode, CocoaPods, Metro, logcat) and shows the real error, the…

The One-Line Package That Broke create-react-app

A tiny npm library shipped a “minor” release and broke some of the biggest JavaScript tools for three hours. What it teaches every backend…

Dependency Confusion in JavaScript: How I Would Attack and Defend a Modern Project

The attack needs no exploit and no stolen credentials, only a package name and a version number.

Why pnpm Exists: Rethinking node_modules

If you work with JavaScript or TypeScript, npm install was probably one of the first commands you learned. It is simple, familiar, and…

How to get Slack alerts when an npm (or PyPI) package you use ships a new version

The registry already showed 4.2.0. Our worker found out from timeouts. Here’s how I get new versions of the packages we depend on into…