I Ran `npm fund` and Found 47 Packages Keeping My App Alive
I've been seeing the same line at the bottom of every npm install for years: added 47 packages, and 12 packages are looking for funding run `npm fun…
Team Management
⚑ Report a ProblemLatest Team Management news from Tech News
All topics
Culture
agents
ai
api
architecture
automation
beginners
career
devchallenge
devops
discuss
javascript
learning
llm
machinelearning
mcp
opensource
productivity
programming
python
react
saas
security
showdev
softwareengineering
startup
testing
tutorial
typescript
webdev
Why npm & pnpm audit miss vulnerabilities
You run pnpm audit in CI. It prints No known vulnerabilities found . The build goes green and you move on. Then someone runs npm audit on the same r…
NestJS Recipes
Hello everyone! Hope you are having a great day. 🖐️ There is always that foundational boilerplate code in NestJS projects that takes up most of our…
I Published My First npm Package - BurnLink
A few days ago, I released BurnLink on npm with one goal: make it easier for developers to integrate BurnLink into their Node.js applications. As a…
I Added an MCP Server to NPMScan for AI Coding Agents
I Added an MCP Server to NPMScan for AI Coding Agents AI coding agents are increasingly choosing libraries, installing dependencies, and modifying p…
Simplifying Authorization in NestJS: A New Approach
The Problem If you’ve built a decent-sized NestJS application, you know the authorization dance. You start with basic Roles, then suddenly you need…
I couldn't find an npm package to sort filenames into buckets, so I built one
Last week I was building a file-management feature. Users could upload documents, and I needed to sort them into sections. One bucket for NOCs, one…
They Asked for My AI Rules. But I Could Not Just Hand Them Over.
A team lead announces that the team will start using AI-assisted development. Everyone nods. Nobody asks what that actually means on Monday morning.…
10 Useless NPM Packages You Didn't Know You Needed
We have all been there. You are staring at your screen late at night, trying to optimize a bundle size, or debugging an enterprise pipeline that has…
I made revera, a tool that scores NPM packages before you blindly install them
Ever installed an npm package without really knowing what you were pulling into your project? I did too, and it bugged me enough that I built Revera…
CI is the wrong place to first hear about your npm dependencies
Your CI catches the npm vulnerability. Your developer is already three branches away and one standup behind. The package is installed, the lockfile…
Nation-State Actors Are Now Targeting Your AI Agent's npm Packages
This article was originally published on LucidShark Blog . On June 17, 2026, Microsoft Threat Intelligence published a report attributing a supply c…
Five days with eventferry — MySQL, SQL Server, MSK IAM, and a core that didn't move
Five days ago I posted I built a transactional outbox toolkit for Node.js — meet eventferry . The pitch was small and specific: Postgres + Kafka, th…
Stop Fighting React Native File Systems: Meet rn-file-toolkit
If you've built React Native apps for long enough, you've probably fought with file downloads, uploads, and filesystem management. Historically, the…
Scarab Field Test #021 — pnpm Self-Upgrade No-Manifest Boundary
Target: pnpm/pnpm Issue: pnpm/pnpm#12240 PR: pnpm/pnpm#12301 Public branch: https://github.com/scarab-systems/pnpm/tree/fix/deps-status-no-manifest…
I Researched the Red Hat npm Incident — Here's What Every Developer Should Know
🚨 What Would I Do If I Accidentally Installed a Malicious npm Package? Recently, I came across reports of a supply chain attack involving npm packag…
I built a tiny, zero-dependency React hook for keyboard shortcuts
Most apps eventually need keyboard shortcuts - a command palette on Cmd/Ctrl+K, Esc to close a modal, mod+S to save. I kept rewriting the same keydo…
I Replaced dotenv With My Own Package — Here's Why You Should Too
I Replaced dotenv With My Own Package — Here's Why You Should Too Every week, the same story. Friday deploy. CI passed. App went up. Then a message…
Why I Stopped Writing 15 * 60 * 1000 in Every Project
Let me be honest with you. Every time I start a new Node.js project, I copy-paste this from my last one: const limiter = rateLimit ({ windowMs : 15…
Gpushx
Hey developers! 👋 I'm Vinnu ( @vinnugollakoti ), Software Engineer from India. Over the years, I’ve worked on Web2, Web3, and multiple AI projects.…
Supply chain npm vs PyPI: I compared both simulations and the most dangerous vector isn't what everyone thinks
Supply chain npm vs PyPI: I compared both simulations and the most dangerous vector isn't what everyone thinks I'd just finished the PyPI post, clos…
I never expected this response ~robot-toast
It started with an SSO project. I was building an IDP server — the kind that handles authentication across connected domains. I wanted a Google-like…
"Why I stopped trusting npm audit (and built my own)"
Generate a CycloneDX SBOM and deterministic, audit-ready risk report from your package-lock.json. You run npm audit. It says “47 vulnerabilities.” C…
guard-install now scans GitHub repos before you run them
Hey everyone, I shared this earlier as a CLI to analyse npm packages before installing. Since then, I’ve added something I think is even more useful…
gni-compression is on npm — What a month of building a domain-adaptive LLM compressor taught me
Seven articles ago I shipped a serialization layer that recovered 1M+ messages losslessly. Today the package is on npm and the compression numbers a…