ADAlbert Deutouinblog-adeutou.hashnode.dev·2d ago · 10 min readnx-safe-suite: A Deep Dive Into Five Production-Grade Next.js PackagesHow each package works, why it is designed the way it is, and what it replaces. This is the second article in a two-part series. The first covers the architecture and the reasoning behind the projec00
ADAlbert Deutouinblog-adeutou.hashnode.dev·2d ago · 6 min readI Built Five npm Packages to Solve the Five Problems Every Next.js Backend IgnoresA production-grade toolkit for Next.js backends, and the architectural thinking behind it. After years of building internal tools and SaaS products with Next.js, I kept copying the same five things 00
ASAdeesh Sharmainblog.adeeshsharma.com·4d ago · 6 min readReactive Editor: click any element in your live app, let your coding agent fix itEvery time I've asked a coding agent to change something on a screen, the conversation goes the same way. I paste a screenshot. I try to describe which button I mean. The agent guesses, edits a file, 00
MSManu Shuklainecorpit.hashnode.dev·Aug 4 · 17 min read42 poisoned npm versions: the keyv worm containment runbook for 4 August 202642 poisoned npm versions: the keyv worm containment runbook for 4 August 2026 Summary. On 4 August 2026, an attacker took over the GitHub account of the maintainer behind keyv and published malware ac00
MSManu Shuklainecorpit.hashnode.dev·Jul 30 · 13 min readGitHub Dependabot malware alerts now cover npm, PyPI and more: how to turn them on (2026)GitHub Dependabot malware alerts now cover npm, PyPI and more: how to turn them on (2026) Summary. On 28 July 2026 GitHub started ingesting malware advisories from the OpenSSF malicious-packages proje00
PTPRANAV THAWAITinomnikon.hashnode.dev·Jul 24 · 5 min readBuilt a React Library That Makes Google Drive Work Like an Image CDNI Built a React Library That Makes Google Drive Work Like an Image CDN Have you ever stored images in Google Drive and thought: "Why can't I just use this link in my React app?" I certainly did. Aft00
MSManu Shuklainecorpit.hashnode.dev·Jul 23 · 11 min readSoftware supply chain security in 2026: an enterprise playbook after the npm attack waveSoftware supply chain security in 2026: an enterprise playbook after the npm attack wave Summary. In four days in July 2026, two npm supply chain attacks showed why perimeter thinking fails. On 11 Jul00
Uu84uinu84u.hashnode.dev·Jul 22 · 3 min readphotu: shell pipe CLI for batch image processing📸 photu turns shell pipes into one fused libvips pass, instead of typing ImageMagick incantations you can never remember. I can never remember ImageMagick's flags. Something like this: $ magick mog00
PKPrashant Koiralainblog.prashantkoirala.info.np·Jul 21 · 22 min readSoftware publishing is moving beyond long-lived tokensPublishing software used to depend on a secret. A maintainer created an API token in a package registry, copied it into a CI secret store, and allowed a workflow to use it every time a release was pub00
VYVincent Yanginvincent4486.hashnode.dev·Jul 21 · 7 min readBe Careful of Your DependenciesOriginally posted at blog.vyang.org. Starting from a situation I encountered, just when I am writing this blog: My operating system -- Valecium is currently still in the alpha stage. It does not provi00
