Snyk takes on responsibility for Node.js vulnerability disclosure program
Learn how to disclose vulnerabilities now that Snyk has agreed to take over from the amazing Node.js ecosystem vulnerability disclosure program. (more…)
Read more »Managing Package Dependencies with Yarn and Node Security
Yarn has been a great alternative to npm and we’ve been using it at Switchboard for quite a while.
You can get a bird’s eye view of the packages that have updates available using yarn outdated. As you might expect, it will check each dependency in your pa… Read more