Is this our chance to stop using NPM?

Posted Jun 1, 2026 18:02 UTC (Mon) by jepsis (subscriber, #130218)
In reply to: Is this our chance to stop using NPM? by zdzichu
Parent article: Multiple redhat-cloud-services npm packages compromised (StepSecurity Blog)

Use pnpm instead of npm, enable the strictest security settings, and configure a reasonable release cooldown period.

---

to post comments

Is this our chance to stop using NPM?

Posted Jun 3, 2026 0:40 UTC (Wed) by fredi@lwn (subscriber, #65912) [Link]