lirantal/npm-security-best-practices resource

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1248 stars · 42 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A curated awesome-list of npm package manager security best practices, covering safe-by-default CLI options, supply chain attack hardening, and secure dependency resolution. It includes copy-paste secure configurations for npm, pnpm, and bun package managers.

Use cases

• harden npm against supply chain attacks
• disable postinstall scripts safely
• block recently published npm packages
• secure .npmrc configuration examples
• mitigate shai-hulud style npm compromises
• vet npm package dependencies for security
• configure pnpm security settings

When to choose

• you maintain Node.js projects and want to reduce npm supply chain risk
• you need practical, copy-paste package manager security configs
• you want a curated reference of npm security practices

When to avoid

• you need an automated security scanning tool rather than guidance
• you are not using npm, pnpm, or bun as your package manager

Facets

learning-resource · maturity active

security developer-tools documentation security developer-tools awesome-lists web-development cli npm supply-chain-security best-practices awesome-list pnpm bun package-manager-security shai-hulud nodejs

Member repositories

For agents

markdown · JSON · MCP: product_card(name="lirantal/npm-security-best-practices")