Find the cost of adding an npm package to your app's bundle size.
The secure way to release an npm package in 2026—Martian Chronicles, Evil Martians’ team blog
How to protect your npm package from being stolen in a supply chain attack and improve its position in security ratings
npmx - Package Browser for the npm Registry
a fast, modern browser for the npm registry. Search, browse, and explore packages with a modern interface.
Features everyone should steal from npmx
What happens when users design their own package registry frontend
Expo — Build native apps with React
Expo is the fastest way to build native apps for iOS, Android, and the web with React.
How Baseline Can Help You Ship Less JavaScript — Smashing Magazine
The gap between “you need a library for this” and “the browser does this” keeps closing. A practical guide to auditing your dependencies and finding what the web platform can now handle for you.
Creem Pricing: 3.9% + $0.40 | No Monthly Fees
One rate. No monthly fees. Taxes, compliance, and fraud protection included. Start selling globally in minutes.
Download pumping: New npm deception technique for supply chain attacks
Learn how attackers exploit automated bot traffic as part of software supply chain attacks to artificially inflate download counters and mask malicious payloads as legitimate.
NP-overrated
If you learned about NP-hard problems in university, your takeaway was probably this:
microcosm: atproto building blocks
Open-source atproto services and resilient community infrastruture to launch your next app
Extensible Software in the age of LLMs | Jeremy Morrell
Solid core + capability-based sandboxes + LLMs = Users with superpowers
Restate - Build innately resilient distributed apps
Restate is a lightweight runtime that lets developers build innately resilient distributed apps without the complexity tax.
