What happens when users design their own package registry frontend
What If npm Ran on AT Protocol?
A thought experiment about what a package registry would look like if built on atproto.
npmx - Package Browser for the npm Registry
a fast, modern browser for the npm registry. Search, browse, and explore packages with a modern interface.
Daniel Roe & Matias Leandro Capeletto - npmx: a fast, modern browser for the npm registry
feat: decentralized registries and mirrors by Aslemammad · Pull Request #2386 · npmx-dev/npmx.dev
This is a pull request for my two months of research on how we can decentralize npm by not breaking any mainstream behavior, so we make it as easy as possible to adopt new paradigms by users withou...
The secure way to release an npm package in 2026—Martian Chronicles, Evil Martians’ team blog
How to protect your npm package from being stolen in a supply chain attack and improve its position in security ratings
A Thousand PRs in Two Weeks: Building NPMX - AT Protocol
Daniel Roe, Matias Capeletto, and Zeu join to discuss how their frustration with JavaScript packaging went from a Bluesky post to one of the most successful new community-led projects on the protocol.
Supporting the npmx Alpha Launch - AT Protocol
The launch of npmx is an incredible showcase for how open source communities can build quickly on top of atproto.
atpkgs
Atpkgs is compatible with the NPM Registry API, so it works with most Node.js package managers.
Popular npm Packages in the keyv and Cacheable Namespaces Co...
Popular npm packages keyv and cacheable compromised.
keyv and cacheable npm Package Hijacked in Supply Chain Attack | Wiz Blog
Wiz Research is actively investigating an ongoing software supply chain attack affecting multiple keyv/cacheable npm packages.
Inside the keyv npm Supply Chain Compromise | Snyk
The keyv npm compromise used preinstall malware, trusted provenance, and IDE hooks to target developer and CI credentials. Learn how to detect and respond.
crates.io: Rust Package Registry
npmx is now in alpha: this is our story, as told by our team and friends
Announcing npmx: a fast, modern browser for the npm registry
npmx.dev