pnappa

2 karma · joined March 18, 2024

pnappaon Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised

Yeah, LavaMoat (https://github.com/LavaMoat/LavaMoat). Dependencies are pinned with capabilities, and scripts are disabled by default.

pnappaon Modern Node.js Patterns

How do you supply the schema on the other side?

I found that keeping the frontend & backend in sync was a challenge so I wrote a script that reads the schemas from the backend and generated an API file in the frontend.