#npm

packages, lockfiles, and the transitive dependency that brought the supply chain with it.

1 blog post.

Blog posts

Startup-grade defense against npm supply-chain attacks, for Future You at 3am. Chainjacking, postinstall scripts, smallest install, most leverage.