A developer introduces a personal JavaScript utility library, explaining its functions, npm installation, and the reasoning behind a single-repository format.
A guide to properly resolving git merge conflicts in package-lock.json files without deleting them, ensuring dependency consistency across teams.
A technical guide on building a blog using Markdown, frontmatter for metadata, and NPM packages like markdown-it for HTML conversion.
Explains when to use dependencies vs devDependencies in package.json, with examples for client-side and server-side apps.
Explains the differences and purposes of package.json and package-lock.json files in Node.js projects, focusing on dependency management.
A critique of modern software's over-reliance on dependencies, sparked by a FOSDEM talk on open source sustainability and maintainer burnout.
A guide on using npm link to streamline local development when working across multiple interdependent npm packages.
A beginner's guide to using npm for managing Node.js packages, covering installation, project setup, and dependency management.
Analysis of the 2019 State of Open Source Security Report, focusing on Node.js and npm vulnerabilities like Path Traversal and ReDoS.
An open source funding experiment that displays ethical ads in the console to support maintainer work on packages like StandardJS.
Essential npm security best practices to protect against malicious packages, including ignoring run-scripts and vetting third-party modules.
npm registry hits 1 million packages. Analysis of top packages, vulnerabilities, and download statistics.
A step-by-step tutorial on how to publish your own open source npm package, covering setup, bundling with Babel, and the publishing process.
Explains three methods to control which files are included in an npm package: .gitignore, .npmignore, and the files property.
Explains the optimal timing for running `npm init` in open-source projects to automatically generate helpful metadata links in package.json.
A developer's journey from a novel idea to launching an open-source project, and the unexpected feedback it receives.
A guide to publishing npm packages following industry best practices, covering account setup, package creation, and advanced publishing techniques.
Learn how to use npm outdated and npm doctor commands to assess your project's dependency health and environment setup.
A guide explaining what JSDelivr is, how it works as a CDN for JavaScript libraries, and when and how to use it in web projects.
Explains the risks of inconsistent package lockfiles in npm/Yarn and how to enforce strict dependency installation using `npm ci` or `--frozen-lockfile`.
