Setting a minimum release age (cooldown) on dependencies is a low-effort, high-impact defense against supply-chain attacks, as most malicious packages are detected and removed within hours. All three …
The article describes an uninstall script for the Beads (bd) tool that performs a comprehensive cleanup of all its traces from a system. By default, the script runs in dry-run mode to show what would …
Deno 2.6 introduces a new tool called `dx`, which functions as an equivalent to `npx` for conveniently running binaries from npm and JSR packages. The release also adds more granular permission contro…
The article explains that Node.js and npm have a permissive default security model, allowing any installed package code, including malicious scripts, full system access. In contrast, Deno is designed …
The article explains that Bun's package installation is significantly faster than other Node.js package managers because it treats installation as a systems programming problem rather than a JavaScrip…
The article describes "Typosquat Detective," a short online game designed to train users to identify look-alike domains used in phishing attacks. The game tests players on spotting tricks like number-…
The Hex team has launched **diff.hex.pm**, a free web-based tool that generates highlighted git diffs for any Hex package version range directly in a browser. Designed to improve supply chain security…