Tag

node-gyp

Safeguard articles tagged "node-gyp" — guides, analysis, and best practices for software supply chain and application security.

1 article

Supply Chain

node-pre-gyp and node-gyp: The Security Cost of Native Modules

@mapbox/node-pre-gyp downloads compiled binaries into your node_modules at install time. Understanding that machinery is the difference between a fast install and an unauditable one.

Jan 28, 20257 min read