npm

Tool review

Socket

Developer-first security platform focused on vulnerable and malicious open-source dependencies. Strong fit when you want package risk visibility before a sketchy dependency turns into your problem.

Blog post

Supabase, Mattsplained

Read the full post.

Node.js

Runs JavaScript outside the browser (on servers or your machine).

Shared tags: node, tooling

package.json

Project file that lists dependencies and scripts.

Shared tags: node, tooling

Bundler

Tool that combines many files into a few optimized ones.

Shared tags: tooling