npm Shrinkwrap reloaded: Locking npm Deps with Package-Lock and Yarn.Lock
Locking or “pinning” dependencies is a widespread best practice in Ruby, Python, and other ecosystems.
Go Concurrency Patterns: Context - The Go Programming LanguageGo
Introducing Dependency Divergence GitHub ActionSocket
Updated and Ongoing Supply Chain Attack Targets CrowdStrike npm PackagesSocket
upm Launches as a Fast, Tiny Package Manager Written in TypeScriptSocket
Happy Birthday, Shai-HuludSocket
Next-level IaC: Powering Up Pulumi with Package EcosystemsPulumi
Troubleshooting Python automatic instrumentation issuesOpentelemetry
How to Protect Your Projects from the Risks of Deprecated npm PackagesSocket
When "Everything" Becomes Too Much: The npm Package Chaos of 2024Socket
PolinRider Spreads Through Compromised GitHub Accounts and PackagistSocket
Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain AttackSocket
Cleaning up import paths in JS/TS packagesSocket
Supply Chain Attack on Axios Pulls Malicious Dependency from npmSocket
Introducing Socket OptimizeSocket
