Managing Node.js Dependencies with Shrinkwrap

Mitigating ImageMagick vulnerabilities in Node.js

Tackling the new npm@3 dependency tree

The case for dependency cooldowns in a post-axios world

Understanding npm and the importance of dependency cooldowns.

Streamline dependency updates with Mergify and Snyk

Automate dependency updates with Mergify and Snyk.

npm Shrinkwrap reloaded: Locking npm Deps with Package-Lock and Yarn.Lock

Locking or “pinning” dependencies is a widespread best practice in Ruby, Python, and other ecosystems. In Node.js locking was much less wide