Tag

npm-he

Safeguard articles tagged "npm-he" — guides, analysis, and best practices for software supply chain and application security.

1 article

Open Source

Is the npm he Package Safe to Use? A Security Review

The npm he package is a tiny, dependency-free HTML entity encoder and decoder. Here is what it does, whether it is safe, and where developers misuse it.

May 27, 20256 min read