Tag

npm-dependencies

Safeguard articles tagged "npm-dependencies" — guides, analysis, and best practices for software supply chain and application security.

2 articles

Open Source

React Bootstrap Icons: Adding Icons Without Adding Risk

React Bootstrap Icons is a convenient SVG icon set for React apps. Here is how to use it and how to keep the dependency from becoming a supply-chain liability.

Jun 4, 20255 min read

Open Source

react-syntax-highlighter: Rendering Code Safely in React

react-syntax-highlighter is the go-to library for showing code blocks in React apps. Here is how to use it and how to avoid the XSS traps around rendering untrusted code.

Jan 28, 20255 min read