NPM Security Articles

Page 1 of 1 (2 articles)

12/4/2025 • EN

No more tokens! Locking down npm Publish Workflows

A guide to securing npm package publishing workflows by eliminating tokens and implementing robust security practices in response to recent incidents.

ci/cd DevOps Github Actions NPM Security package management

Zach Leatherman

3/5/2019 • EN

How to avoid leaking secrets to the npm registry

Explains how to prevent accidentally publishing secrets like API keys to the npm registry, covering .npmignore, package.json files, and dry-run.

Gitignore NPM Security Npmignore Package Publishing Secrets Management

Liran Tal

NPM Security Articles

No more tokens! Locking down npm Publish Workflows

How to avoid leaking secrets to the npm registry

Select Language