Blogs

The 5 dimensions of an npm dependency

Snyk

We often talk about the growing number of npm dependencies, and how they make us productive and fast or fragile and insecure.

Visit Site

What is a Container Registry security?Snyk 10 best practices to containerize Node.js web applications with DockerSnyk How to verify and secure your Mastodon accountSnyk Vulnerability assessmentSnyk Weaponizing AI Coding Agents for Malware in the Nx Malicious Package Security IncidentSnyk Using Snyk reporting for data-driven securitySnyk Introducing Dependency Divergence GitHub ActionSocket Updated and Ongoing Supply Chain Attack Targets CrowdStrike npm PackagesSocket upm Launches as a Fast, Tiny Package Manager Written in TypeScriptSocket Happy Birthday, Shai-HuludSocket Announcing dependency caching for Pulumi DeploymentsPulumi Forward Compatibility and Toolchain Management in Go 1.21 - The Go Programming LanguageGo Logical properties - GlossaryDeveloper Mozilla How to Protect Your Projects from the Risks of Deprecated npm PackagesSocket When "Everything" Becomes Too Much: The npm Package Chaos of 2024Socket Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain AttackSocket Supply Chain Attack on Axios Pulls Malicious Dependency from npmSocket How do I use the latest npm version for my Vercel Deployment?Vercel OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain AttackSocket New Study Identifies 53 Slopsquatting Targets Across 5 Frontier LLMsSocket