Tips to stay safe from NPM supply chain attacks
[Updated for AI ๐ค] Continuous updates on how to stay safe from NPM supply chain attacks.
์คํ์์ค
๋ฐ์ (1)
๋น์ทํ ํ๋ก๋ํธ
์ค๋ช ์ด ๋น์ทํ ์
Socket web extension
chrome.google.comfree NPM supply chain protection
Safe-install
npmjs.comsafer NPM installs with trusted build dependencies
Safe-NPM
github.comonly install packages that are +90 days old
Tilth
github.comI spent tokens so my agents would stop wasting them (~4k Rust)
DepsGuard
github.comOne command to harden NPM/pnpm/yarn/bun/uv configs