Show HN: A VS Code extension buffers NPM updates to avoid supply chain attacks
By about14sheep · 2026-07-30 · 1 points · 0 comments
https://marketplace.visualstudio.com/items?itemName=about14sheep.tinynpm
I had been using package.json version keepers for quite some time but after the big supply chain attack i thought they would be the perfect place to add in some security. The idea is just to provide the latest package number x days old. This will help prevent most of the danger…
Open the full discussion on BetterNews