S
https://github.com/fual/nagibabel.js Будьте осторожны с установкой пакета нагибабель
В смысле "пакета"? Там же просто репка, а пакета такого нет https://www.npmjs.com/search?q=nagibabel&page=1&ranking=optimal
Size: a a a
2018 March 21
DZ
гы)
ТК
Круть
Парень из яндекса
MB
завёл issue что на винде не работает :)
2018 March 28
2018 April 10
DZ
Earlier today, npm, Inc. announced its acquisitionof the team and assets of ^Lift Security, including their work on the Node Security Platform. Adam Baldwin and his team have joined npm to work full time on keeping the npm Registry and npm applications safe, and to create new products to help developers and their companies securely develop JavaScript.
^Lift Security has been working with npm longer than npm, Inc. has been a company. They review npm's own code to ensure it's safe before we take it live, and conduct periodic security audits, including penetration tests of our services. Most prominently, the Node Security Platform has become a definitive catalogue of JavaScript vulnerabilities for developers and security vendors.
npm is where the Node Security Platform belongs. All NSP users are npm users, and the security of open source code is core to npm's mission. By combining our resources, we can deliver a continuous approach to security at scale, empowering millions of developers to build more secure code.
As one team, we'll continue keeping the registry safe, and develop new ways to help individuals and companies understand and trust the JavaScript code that they write and share.
^Lift Security has been working with npm longer than npm, Inc. has been a company. They review npm's own code to ensure it's safe before we take it live, and conduct periodic security audits, including penetration tests of our services. Most prominently, the Node Security Platform has become a definitive catalogue of JavaScript vulnerabilities for developers and security vendors.
npm is where the Node Security Platform belongs. All NSP users are npm users, and the security of open source code is core to npm's mission. By combining our resources, we can deliver a continuous approach to security at scale, empowering millions of developers to build more secure code.
As one team, we'll continue keeping the registry safe, and develop new ways to help individuals and companies understand and trust the JavaScript code that they write and share.
2018 April 18
JD
Между тем npm вводят pgp подписи http://blog.npmjs.org/post/172999548390/new-pgp-machinery
2018 May 03
S
S
https://blog.npmjs.org/post/173526807575/reported-malicious-module-getcookies
Хотя это уже баян, но вдруг кто-то пропустил.
Хотя это уже баян, но вдруг кто-то пропустил.
JD
https://blog.npmjs.org/post/173526807575/reported-malicious-module-getcookies
Хотя это уже баян, но вдруг кто-то пропустил.
Хотя это уже баян, но вдруг кто-то пропустил.
тем кто использует jwt это не страшно.
2018 May 05
DZ
Ну правильно приготовленный jwt достаточно секурный да и врядли адекватные люди юзают что-то незнакомое для кук
🦉
Ну правильно приготовленный jwt достаточно секурный да и врядли адекватные люди юзают что-то незнакомое для кук
Жвт нельзя приготовить адекватно для сессий