npm now validates every publish with security scans — uploads may take longer
tristanbob · x · 2026-11-14
npm now runs security-scan validation on every package publish, which can add some time to uploads. Developer Kent C. Dodds argues the tradeoff is worth it, and others say they've long hoped for this — a notable supply-chain hardening step following recent npm malware incidents.
More from coding & agent
- shadcn UI SDK lets agents edit forms through the same components as humans — shadcn · 2026-11-14
- Google Antigravity resets everyone's Gemini quota after a week of shipping — rseroter · 2026-11-14
- 10 Years of Postgres Expertise: 'Claude Just Made the Whole Team a Postgres Expert' — RealGeneKim · 2026-11-14
- Claude Code Settings Cleanup: 55% Fewer Gray Words, and What It Says About the Team — gem_ray · 2026-11-14
- A Small Frozen Eval Set Is Enough to Tell If Your Agent Actually Got Better — ChefOk4636 · 2026-11-14
- Claude Code Projects Update: Proactive Coordinator Manages Parallel Task Threads — ClaudeDevs · 2026-11-14