Tag

publishing

Safeguard articles tagged "publishing" — guides, analysis, and best practices for software supply chain and application security.

1 article

Security Guides

How to Build a Secure npm Package (2026)

A practical checklist for shipping an npm package that resists supply chain attacks: provenance, granular tokens, minimal published files, no install scripts, and ReDoS-safe code.

Jul 1, 20265 min read