Learning From npm's Rough Few Months
[no description provided]The node package manager (npm) is having a bad few months. Let’s look at what we can do, what other package managers should do and what we can learn at a policy level, particularly in the U.S. framing of “critical infrastructure.”
People in security who remain focused on the IT side of the house, rather than the development side, may not be familiar with npm. As its website says, "npm is the package manager for JavaScript and the world’s largest software registry. Discover packages of reusable code — and assemble them in powerful new ways." Odds are excellent that one or more of your websites rely on npm.