







Specifics of npm's package.json handling
atpkgs
Atpkgs is compatible with the NPM Registry API, so it works with most Node.js package managers.

npmx - Package Browser for the npm Registry
a fast, modern browser for the npm registry. Search, browse, and explore packages with a modern interface.

What If npm Ran on AT Protocol?
A thought experiment about what a package registry would look like if built on atproto.
The secure way to release an npm package in 2026—Martian Chronicles, Evil Martians’ team blog
How to protect your npm package from being stolen in a supply chain attack and improve its position in security ratings

Daniel Roe & Matias Leandro Capeletto - npmx: a fast, modern browser for the npm registry
Popular npm Packages in the keyv and Cacheable Namespaces Co...
Popular npm packages keyv and cacheable compromised.

Features everyone should steal from npmx
What happens when users design their own package registry frontend



keyv and cacheable npm Package Hijacked in Supply Chain Attack | Wiz Blog
Wiz Research is actively investigating an ongoing software supply chain attack affecting multiple keyv/cacheable npm packages.


🙋♂️ so ... for reasons: I would love to know people's frustrations with: - the current npmjs.com - admin user flows on npm web ui (and cli, locally) 🙏