pnappa
Re:Self Propagating NPM Malware Compromises over 40 Packages
on Tuesday September 16, 2025 @09:18PM (#45270399)
Yeah, LavaMoat (https://github.com/LavaMoat/LavaMoat). Dependencies are pinned with capabilities, and scripts are disabled by default.
Re:Modern Node.js Patterns
on Sunday August 03, 2025 @08:11PM (#44780968)
How do you supply the schema on the other side?
I found that keeping the frontend & backend in sync was a challenge so I wrote a script that reads the schemas from the backend and generated an API file in the frontend.