Tag
Satirical article highlighting the recurring supply chain attacks in the npm registry, contrasting with more secure ecosystems like Go and Rust, and mocking the JavaScript community's acceptance of such vulnerabilities.
sx is an open-source package manager for sharing AI skills, MCP configs, and commands across teams. It helps capture individual AI expertise and distribute it automatically to team members.
The Bun JavaScript runtime and toolkit has been rewritten in Rust, marking a major change from its original Zig implementation.
A developer shares a tip to configure a minimum release age for package installs to mitigate supply-chain attacks.
Aube is introduced as a new, high-performance Node.js package manager that is significantly faster than pnpm and bun while using less disk space by utilizing a global store for dependencies.
Bun is an all-in-one toolkit for JavaScript and TypeScript apps, providing a fast runtime, package manager, and test runner as a single executable. It aims to be a drop-in replacement for Node.js with significantly faster startup and lower memory usage.