The secure way to release an npm package in 2026
Seven quick wins against supply chain attacks, most doable in under a day.
Security news
Cross-Origin Storage API: stop downloading twice
A proposed API to store big files by hash and share them across origins.
The website specification
A platform-agnostic reference of features every quality website should have.
The HTML Sanitizer API
Browser-native XSS-safe HTML insertion without DOMPurify or other libraries.
setHTML(), Trusted Types and the Sanitizer APINew setHTML() and Sanitizer API prevent XSS by safely inserting HTML into the DOM.