NPM Security Articles

Page 1 of 1 (3 articles)

2/13/2026 • EN

Dew Drop – February 13, 2026 (#4604)

A daily tech link roundup covering .NET, AI, web development, Windows, and VS Code updates, including articles on fixing layouts, new AI tools, and development best practices.

Azure Data Studio Net Maui NPM Security Openai visual studio code

Alvin Ashcraft

12/4/2025 • EN

No more tokens! Locking down npm Publish Workflows

A guide to securing npm package publishing workflows by eliminating tokens and implementing robust security practices in response to recent incidents.

ci/cd DevOps Github Actions NPM Security package management

Zach Leatherman

3/5/2019 • EN

How to avoid leaking secrets to the npm registry

Explains how to prevent accidentally publishing secrets like API keys to the npm registry, covering .npmignore, package.json files, and dry-run.

Gitignore NPM Security Npmignore Package Publishing Secrets Management

Liran Tal

NPM Security Articles

Dew Drop – February 13, 2026 (#4604)

No more tokens! Locking down npm Publish Workflows

How to avoid leaking secrets to the npm registry

Select Language

We use cookies