npm-security
Safeguard articles tagged "npm-security" — guides, analysis, and best practices for software supply chain and application security.
171 articles
Is react-native-image-crop-picker Safe? A Security Guide
react-native-image-crop-picker is a popular native module for photo selection and cropping in React Native apps. Here is how to assess its risk and use it safely.
papaparse npm: Security Review and Best Practices
PapaParse is the go-to CSV parser for JavaScript, but older versions carry a ReDoS flaw. Here is a security review and how to use it safely on untrusted files.
uuid npm: Security Review and Safe Usage Guide
The uuid npm package is one of the most-installed libraries in the JavaScript ecosystem. Here is an honest look at its security posture and how to use it correctly.
pdfmake npm: A Security Review and Safe Usage Guide
pdfmake is a popular client and server PDF generator, but its dependency chain and server-side usage carry real risks. Here is a practical security review.
eslint-plugin-simple-import-sort: A Practical Security Guide
What eslint-plugin-simple-import-sort does, why import ordering matters for review hygiene, and how to add it without introducing a new supply-chain risk.
node-forge Vulnerabilities: What Happened and What to Use Now
node-forge shipped signature-forgery and prototype-pollution fixes over the years, and its release cadence has gone quiet. Here is what each node-forge vulnerability meant and what to reach for today.
https-proxy-agent: What It Does and How to Use It Safely
A practical security review of https-proxy-agent, the Node.js module that tunnels HTTPS through an HTTP proxy, plus the advisories worth knowing before you pin a version.
Node.js Vulnerabilities: Tracking and Patching at Scale
How to actually keep up with Node.js vulnerabilities across dozens of services — where advisories come from, what to automate, and what still needs a human.
npm Commands: A Security-Focused Guide to Safe Usage
The npm commands you run every day have security consequences. Here is a practical npm commands list with the safe way to use each one.
node-xlsx Security: Handling Untrusted Excel Files Safely
node-xlsx is a thin wrapper around SheetJS, so its security posture is inherited. Here is what that means for parsing untrusted spreadsheets and how to lock it down.
JavaScript Security Best Practices Every Team Should Actually Follow
Most JavaScript security incidents come from a handful of repeated mistakes. These are the best practices that prevent them, from XSS to the npm dependency graph.
core-js on npm: Security Review and Safe Usage
A security and sustainability review of core-js on npm: the postinstall history, the maintainer funding crisis, and how to keep this near-universal dependency safe.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.