DEV Community

npm

Node Package Manager

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
✨ Meet Swingly — a tiny character that lives on your webpage and swings gently.

✨ Meet Swingly — a tiny character that lives on your webpage and swings gently.

Comments
1 min read
What is FNM ?

What is FNM ?

1
Comments
2 min read
Our beta became the version every new customer installed

Our beta became the version every new customer installed

Comments
2 min read
Finding the second copy of React that npm ls cannot see

Finding the second copy of React that npm ls cannot see

Comments 4
2 min read
TanStack npm supply-chain attack: how a Dependabot bump spread a worm

TanStack npm supply-chain attack: how a Dependabot bump spread a worm

1
Comments
10 min read
npm trusted publishing finally covers dist-tags, if you ask nicely

npm trusted publishing finally covers dist-tags, if you ask nicely

Comments
5 min read
How to fix package-lock.json merge conflicts (and yarn.lock, poetry.lock, go.sum) the right way

How to fix package-lock.json merge conflicts (and yarn.lock, poetry.lock, go.sum) the right way

Comments
2 min read
Khmer Hybrid Calendar v1.1.0 Released — Complete Holidays, UNESCO Heritage & 10x Faster 🚀

Khmer Hybrid Calendar v1.1.0 Released — Complete Holidays, UNESCO Heritage & 10x Faster 🚀

Comments
2 min read
We Blamed the Market for a Metric Our Own Clients Broke

We Blamed the Market for a Metric Our Own Clients Broke

Comments
6 min read
yarn.lock: may the `--force` be with you

yarn.lock: may the `--force` be with you

1
Comments 1
14 min read
yarn.lock: you can't `sed` a graph

yarn.lock: you can't `sed` a graph

1
Comments 1
10 min read
Mitigating Security Risks from Malicious npm Packages Through Enhanced Vetting and Monitoring

Mitigating Security Risks from Malicious npm Packages Through Enhanced Vetting and Monitoring

1
Comments
13 min read
CaptchaKit: A Self-Hosted CAPTCHA Package for React & Next.js + Try It Live

CaptchaKit: A Self-Hosted CAPTCHA Package for React & Next.js + Try It Live

5
Comments
1 min read
express-validator

express-validator

1
Comments
6 min read
None of the Big Package Registries Can Tell You If a Dependency Is Abandoned

None of the Big Package Registries Can Tell You If a Dependency Is Abandoned

Comments 2
7 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.