Back to article

Staged publishing and new install-time controls for npm (opens in new tab)

Covers 2 stories including Creating and Publishing Your First NPM Package 📦Covered by 10 sources including Andrew Nesbitt, tldr.techDiscussed on Hacker News and Lobsters

Covers 2 related stories

Creating and Publishing Your First NPM Package 📦

Discussed on DEV

docs.npmjs.com·

Trusted Publishing for NPM Packages

Discussed on Hacker News

Covered in 10 articles

Andrew Nesbitt·

This Week in Package Management: 23 May 2026

LiteSpeed cPanel 0-Day ⚙️, Apple M5 MIE Defeated 🍎, npm Staged Publishing ⛓️

thehackernews.com·

npm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain Attacks

LeakWatch 2026, security incidents, data breaches and IT situation for the current calendar week 21 – Pentecost, fake voices and the question of whom to still t...

thisweekinreact.com·

This Week In React #283: TanStack, RSC, Liquid DOM, Performance, i18n, docs, Apollo, shadcn | Expo, Reanimated, worklets, NativeScript, Standard Navigation, Strict DOM, Lynx, Apex, ExecuTorch | TC39, npm, pnpm, Node.js, Deno, Firefox

Discussed on r/reactjs

CTO at NCSC Summary: week ending May 31st

Discussed on Substack

blog.packagist.com·

An Update on Composer and Packagist Supply Chain Security

Discussed on Hacker News

IT Security Weekend Catch Up

news.risky.biz·

Risky Bulletin: Mythos found thousands of critical bugs

In other languages

Расплата за vibe coding: GitHub добавил ручное одобрение публикаций в npm