npmjs.com anyone? Slow as hell. Same for stackoverflow sites.❓

#npmjs #stackoverflow #internetSlow

Do you need #SFSymbols in your Web project? I made a thing for that [1]. 😃

And I just published it on #npmjs [2].

#WebDevelopment #React #TypeScript

[1] https://sfsymbolslib.layered.work
[2] https://www.npmjs.com/package/sf-symbols-lib

> New TOTP (Time-based One-Time Password) setups for npm access will be permanently disabled. Existing TOTP configurations will continue to work for now, but they will be phased out in the coming months.

no, i zaraz tylko zintegrują webauthn z dowodami cyfrowymi i nie będzie można publikować pakietów w npmjs bez potwierdzenia tożsamości.

Przegapiłem też że #npmjs to teraz gith..., eee, micro$oft

https://github.blog/changelog/2025-09-29-strengthening-npm-security-important-changes-to-authentication-and-token-management/

#javascript #programowanie

Strengthening npm security: Important changes to authentication and token management - GitHub Changelog

As part of our ongoing commitment to securing the npm ecosystem, we’re implementing the first phase of security improvements outlined in our recent announcement. These changes will roll out over…

The GitHub Blog

Nobody should be using npmjs without checking also this:

https://npm.anvaka.com/#/view/2d/decompress-tarbz2

And btw, how stupid is it that npmjs allows to sort by dependents but not by the number of transitive dependencies. And why don't they show transitive dependencies anyway? It would make it blatantly obvious what an abyss many packages are.

#npm #npmjs #javascript #webdev

Visualization of npm dependencies

Visualization of npm dependencies

npm debug and chalk packages compromised

The popular packages debug and chalk on npm have been compromised with malicious code

npm debug and chalk packages compromised
Affected:
"backslash (0.26m downloads per week)
chalk-template (3.9m downloads per week)
supports-hyperlinks (19.2m downloads per week)
has-ansi (12.1m downloads per week)
simple-swizzle (26.26m downloads per week)
color-string (27.48m downloads per week)
error-ex (47.17m downloads per week)
color-name (191.71m downloads per week)
is-arrayish (73.8m downloads per week)
slice-ansi (59.8m downloads per week)
color-convert (193.5m downloads per week)
wrap-ansi (197.99m downloads per week)
ansi-regex (243.64m downloads per week)
supports-color (287.1m downloads per week)
strip-ansi (261.17m downloads per week)
chalk (299.99m downloads per week)
debug (357.6m downloads per week)
ansi-styles (371.41m downloads per week)
"

Info >> https://www.aikido.dev/blog/npm-debug-and-chalk-packages-compromised

#node #security #compromised #programing #npmjs #npm #hacked

npm debug and chalk packages compromised

The popular packages debug and chalk on npm have been compromised with malicious code

@cloudflare Cloudflare, are you blocking anything with the word “camel” in it? Such as NPM modules that have `camelcase` in the name?

#outage #npmjs #cloudflare #camel

Looking for a simple way to provide a compressed archive from a web application with the requirement to create the archive in the browser, not on the server.

- JSZip: 12 (transitive) dependencies
- tar-js: 0 dependencies

While zip may be more common, the 0-dependencies is a unique selling point for me!

#javascript #zip #tar #programming #npmjs