13:01
2026-07-15
dev.to
developer-tools
A plugin can pass validation and still fail after install
A developer known as Nekoautomata Miki built PluginProof, a tool that checks npm packages for structural failures that survive basic manifest validation, such as missing files in the tarball, version …