Post

luke karrys@lukekarrys.com

npm is now scanning packages for malware at publish time before they become available for consumption

github.blognpm publish-time malware scanning and dual-use metadata - GitHub ChangelogAs part of our ongoing supply-chain security work, npm is introducing automatic scanning of packages at publish time. This changelog covers what publishers can expect and a new metadata requirement…