TLDR Dev · LAUNCHES & TOOLS
SAFE NPM
Summary from the TLDR Dev newsletter
`safe-npm` is a security-focused npm installer that prevents supply chain attacks by only installing package versions that have been publicly available for a minimum time (default 90 days). It works by querying the npm registry, filtering out recent versions, and installing the newest safe version that meets semver and age requirements.