Skip to main content

Guides tagged “supply-chain”

6 guides

  1. 13 min read

    axios Alternatives 2026: got, ky, and undici

    axios was compromised in a supply chain attack in March 2026. Compare got, ky, undici, and native fetch — performance, bundle size, and TypeScript support.

    axios · got · ky

  2. 13 min read

    npm Supply Chain Security Guide 2026

    Defend against npm supply chain attacks in 2026: typosquatting, dependency confusion, malicious packages, lockfile poisoning, and the tools that stop them.

    security · npm · supply-chain

  3. 6 min read

    How to Secure Your npm Supply Chain in 2026

    Practical npm supply chain security for 2026. Lockfiles, audit automation, provenance attestation, Socket.dev scanning, and the 5 attacks targeting npm.

    npm · security · supply-chain

  4. 16 min read

    The npm Security Landscape: Supply Chain Attacks 2026

    npm supply chain attacks in 2026: the real threat landscape, which packages were targeted, and the defense stack that actually protects production applications.

    security · npm · supply-chain

  5. 17 min read

    Security Vulnerabilities by Category 2026

    npm security vulnerability data by category in 2026: which categories have the most CVEs, what types of vulnerabilities occur, and mitigation strategies.

    npm · security · vulnerabilities

  6. 9 min read

    npm Package Security: Best Practices for 2026

    Protect your project from supply chain attacks, malicious packages, and dependency vulnerabilities. A practical security guide for npm users in 2026 now.

    security · npm · supply-chain

All topics