Disrupting supply chain attacks on npm and GitHub Actions
Explore the changes we've shipped across npm and GitHub Actions over the past few months to disrupt supply chain attack techniques and limit their imp…
Testing & QA
⚑ Report a ProblemLatest Testing & QA news from Tech News
All topics
agents
ai
api
architecture
automation
aws
backend
beginners
career
claude
cybersecurity
database
devchallenge
devops
javascript
llm
machinelearning
mcp
opensource
performance
productivity
programming
python
security
showdev
softwareengineering
testing
tutorial
typescript
webdev
How redis-packhash Helps You Leverage Listpack Hashes in Redis
In my earlier post , I showed that storing a million small values as Redis keys is a waste of memory. It's because every key has its own overhead. To …
Как я автоматизировал превращение вайбкодерского PoC в production-ready MVP
Как я автоматизировал превращение вайбкодерского PoC в production-ready MVP За несколько часов с помощью AI можно собрать работающий PoC: интерфейс от…
I couldn't find an npm package to sort filenames into buckets, so I built one
Last week I was building a file-management feature. Users could upload documents, and I needed to sort them into sections. One bucket for NOCs, one fo…
Stop Generating Nonsense Indian Mock Data. I Built a Better Way!
If you build apps for the Indian market, you've probably needed mock demographic data for testing, UI previews, or training ML models. And if you've u…
They Asked for My AI Rules. But I Could Not Just Hand Them Over.
A team lead announces that the team will start using AI-assisted development. Everyone nods. Nobody asks what that actually means on Monday morning. S…
Brute forcing my way to better HTML > DOCX conversion
About 10 years ago I fell in love with Vue.js. The easy-to-learn syntax and reactivity were a joy to work with, and HMR (hot module replacement) added…
ChatGPT -> Codex CLI: как перенести контекст диалога в локальную сессию
Обсуждение архитектуры или бага часто начинается в ChatGPT, а реализация продолжается локально в Codex CLI. Рассказываю, как я сделал небольшую CLI-ут…
Did Deno 2.8 Swallow the npm Toolchain? I Ran install, ci, audit, and pack Myself
Same project, same dependencies. And yet, when I asked both tools "how many vulnerabilities do you have?", they answered differently. $ npm audit 2 vu…
Protestware: пережитый тренд или устоявшаяся проблема?
В мире открытого кода термин protestware стал новым классом риска в цепочке поставки ПО: мейнтейнеры намеренно вносят изменения, чтобы выразить личную…
From Code to npm: Vue 3 Component Library Publishing Guide
A complete record of publishing moongate-vue from build to npm, including 2FA, WebAuthn, registry switching, and automation scripts. This article cove…
Мы спросили, багхантеры они или нет, они сказали «Нет»
Всем привет от команды DFIR JetCSIRT! Хотим поделиться с вами одним интересным кейсом, эмоции от которого прекрасно описывает обложка... Заказчик заво…
What is Monorepo ?
Have you ever built a full-stack application (without fullstack framework like NextJS), if yes so you might definitely know that you need to build two…
Five days with eventferry — MySQL, SQL Server, MSK IAM, and a core that didn't move
Five days ago I posted I built a transactional outbox toolkit for Node.js — meet eventferry . The pitch was small and specific: Postgres + Kafka, the …
Scarab Field Test #021 — pnpm Self-Upgrade No-Manifest Boundary
Target: pnpm/pnpm Issue: pnpm/pnpm#12240 PR: pnpm/pnpm#12301 Public branch: https://github.com/scarab-systems/pnpm/tree/fix/deps-status-no-manifest La…
I Researched the Red Hat npm Incident — Here's What Every Developer Should Know
🚨 What Would I Do If I Accidentally Installed a Malicious npm Package? Recently, I came across reports of a supply chain attack involving npm packages…
Агенты генерируют код быстрее. Дубли тоже
Код стало писать дешевле: большие команды и AI-агенты быстрее создают новые файлы, паттерны и, иногда, дубли. Если поиск copy-paste работает медленно,…
I Replaced dotenv With My Own Package — Here's Why You Should Too
I Replaced dotenv With My Own Package — Here's Why You Should Too Every week, the same story. Friday deploy. CI passed. App went up. Then a message in…
npm Scripts and package.json: The Complete Guide (2026)
npm Scripts and package.json: The Complete Guide (2026) Most developers only use npm start and npm install . Here's everything else you're missing. Un…
Why I Stopped Writing 15 * 60 * 1000 in Every Project
Let me be honest with you. Every time I start a new Node.js project, I copy-paste this from my last one: const limiter = rateLimit ({ windowMs : 15 * …
I Published My First npm Package — Here's Everything I Wish I Knew
I Published My First npm Package — Here's Everything I Wish I Knew Publishing to npm isn't hard. But the details trip everyone up. Here's the complete…
"Why I stopped trusting npm audit (and built my own)"
Generate a CycloneDX SBOM and deterministic, audit-ready risk report from your package-lock.json. You run npm audit. It says “47 vulnerabilities.” Coo…
gni-compression is on npm — What a month of building a domain-adaptive LLM compressor taught me
Seven articles ago I shipped a serialization layer that recovered 1M+ messages losslessly. Today the package is on npm and the compression numbers are…