Web Components · Phần 15 — Capstone: đóng gói và phát hành component library
Khép series bằng Mini Kanban: chốt public contract, package ESM và types, Custom Elements Manifest, SemVer, npm pack, rồi kiểm chứng trong HTML, React và Vue.
Filter/Tag
#npm
6 entries
-
-
Command Line cho Developer · Part 8 - Node, npm, pnpm & Package Scripts
Workflow Node/package manager trong terminal: node/npm/pnpm version, corepack, npm run, pnpm exec/dlx, npm ci, frozen lockfile, env vars, npm ls và pnpm why.
-
Node Package Managers · Part 9 — Supply-Chain Attacks
How attackers get code into your node_modules: typosquatting, dependency confusion, malicious postinstall payloads, maintainer account takeover, and protestware — dissected through real npm incidents.
-
Web Security for Frontend Devs · Part 17 — Supply-Chain Attacks via npm install
Bonus track: how a single npm install can run attacker code on your machine — lifecycle scripts, transitive deps, git prepare, bin shadowing — the signals to audit, and a full layered defense. With a live install simulator and exercises.
-
Node Package Managers · Part 2 — npm in Depth
The default package manager, demystified: package-lock.json anatomy, hoisting and phantom dependencies, npm ci vs npm install, lifecycle scripts, npx, .npmrc and scoped registries.
-
Node Package Managers · Part 1 — The Mental Model
What a package manager actually does under npm install — resolve, fetch, link — plus package.json, semver ranges, the registry, and why the lockfile is the most important file in your repo.