My new article is out!
A systematic guide to releasing npm packages as safely as possible in 2026 (with a Skill to quickly apply the practices to your own open source projects).
Not just “do X”, I cover real attacks and explain how each defense helps.
evilmartians.com/chronicles/the…
@sitnik_en@mastodon.social on X: "My new article is out! A systematic guide to releasing npm packages as safely as possible in 2026 (with a Skill to quickly apply the practices to your own open source projects). Not just “do X”, I cover real attacks and explain how each defense helps. https://t.co/reT2FsjAOY"
Share it with a friend who maintains an open source project. Let’s reduce the number of supply chain attacks over the next year.I’m especially proud of all the references to the 1995 movie Hackers in the cover art for my new article on defending against supply chain attacks. And it’s hilarious how perfectly the T-shirt slogan fits the @evilmartians brand.
I’ve been releasing tools that help with this. Check out fledgling and @varlock/bumpy on npm. Would love to hear what you think!
