Tag

npm-rollup

Safeguard articles tagged "npm-rollup" — guides, analysis, and best practices for software supply chain and application security.

1 article

Open Source

npm rollup: A Security Review and Safe Usage Guide

A practical look at what installing rollup from npm means for your supply chain, the DOM clobbering XSS bug you should know about, and how to pin a safe version.

Mar 18, 20256 min read