Back to tags
#npm
packages, lockfiles, and the transitive dependency that brought the supply chain with it.
1 blog post.
Blog posts
A startup-grade defense against npm supply-chain attacks, written for Future You at 3am. Chainjacking, postinstall scripts, and the smallest install that…