How GitHub could secure npm
Analysis of npm supply chain attacks in 2025 and a critique of GitHub's security response, proposing stronger measures.
Analysis of npm supply chain attacks in 2025 and a critique of GitHub's security response, proposing stronger measures.
Release notes for version 2.0.0 of the sequelize-migration-wrapper npm package, a tool for Sequelize database migrations.
A beginner's guide to using npm packages and bundling JavaScript code for web development projects.
A beginner's guide to running a local web server, explaining IP addresses, localhost, ports, and using npm for web development.
Introduces Crosspost, an npm CLI tool and MCP server for posting to multiple social media platforms (Twitter, Mastodon, etc.) from the command line or via Claude Desktop.
A guide on using the ts-rs crate to generate TypeScript bindings from Rust code, including a custom Rollup plugin for bundling.
A step-by-step guide to installing React.js, Node.js, NPM, and VS Code on MacOS for web development.
A step-by-step guide for installing and setting up React.js on a Windows machine, including Node.js, npm, and Visual Studio Code.
A guide to publishing an npm package that supports both ESM and CommonJS modules using TypeScript, including dual tsconfig files and package.json exports.
A developer explores using LightDOM to solve styling challenges in Web Components and releases an npm package for a native sharing button.
A guide to installing Neovim LSPs and NPM tools in a central, local directory and adding it to the $PATH for better version control and security.
A developer reflects on personal projects, including migrating a blog from WordPress to Kirby and updating to Eleventy 2.0.
Explains methods for estimating NPM package market share, using Redux and state management libraries as examples with various data sources.
A beginner-friendly guide for front-end developers to learn essential terminal commands and tricks for modern web development.
Analyzes if NPM package popularity correlates with quality using data from npms.io, finding it can be an indicator but not a guarantee.
A guide on how to evaluate the accessibility (a11y) of npm packages before using them in a web project.
Critique of npm audit's flaws, arguing its default rollout was rushed and harmful to front-end development workflows.
An in-depth look at how NPM works, covering its core components like the CLI, module resolution, and lockfiles, as part of an 'under-the-hood' series.
A curated list of useful NPM packages for productivity, covering frontend/backend frameworks, styling, and utilities for Node.js developers.
A tutorial on setting up a new JavaScript project from scratch, including npm initialization and project configuration.