Source maps or not?
When npm packages actually need them, and how much install size they cost.
Npm news
The secure way to release an npm package in 2026
Seven quick wins against supply chain attacks, most doable in under a day.
Replacements.fyi: performant, safer npm package alternatives
Find more performant and safer replacements for outdated or unnecessary npm packages.
Look up web platform features from your terminal
Search features by keyword and see Baseline status, MDN docs, specs, browser bugs, and more.
Web dependencies are broken. Can we fix them?
Dependency management on the web needs an intervention, not more bundler glue.
Tending your dependency garden
Treating dependencies as part of your product: updating, removing, and monitoring security.