Articles for people who
ship the stack
Original rewrites on React, Node.js, TypeScript and AI — practical notes from the same engineering practice behind our operator software. Article bodies are in English.
Tagged: npm
Zero Findings Across How Much Code? Auditing 300 MCP npm Packages
A tarball audit of 300 MCP server packages on npm found 217 with runtime code the scanner never read. Why a clean result needs a coverage receipt attached.
8 min readWhy pnpm Installs Faster Than npm: Store, Links, and Strict node_modules
pnpm beats npm on install speed by using a content-addressable store, hard links instead of copies, and a strict symlinked node_modules that skips expensive hoisting.
3 min readSwitching a Node project from npm to pnpm without breaking the team
npm vs pnpm on disk layout, phantom dependencies and lockfiles, then a Node.js team migration with pnpm import, only-allow and a pinned packageManager field.
6 min readSandboxing node_modules with the Node.js Permission Model Flags
Learn how the Node.js --permission flag denies filesystem, network and process access by default, how to grant it precisely, and where its limits lie.
12 min readWhat npm install Really Does: Registry, package.json and Lockfiles
A practical walkthrough of npm: the registry and CLI, how npm install resolves packages, what package.json and package-lock.json record, and how to publish.
7 min readNative Browser APIs Replacing Popular npm Packages in 2026
Explains how native JavaScript and CSS features like Signals, the pipeline operator, Temporal, and Anchor Positioning are replacing common npm packages.
8 min readNpm Supply Chain Attacks: How They Work and How to Defend Node.js
Explains how npm supply chain attacks like account takeovers, typosquatting, and dependency confusion work, plus concrete steps to harden Node.js installs.
8 min readReact + Vite Setup Guide (2026): Your First Working App, Explained
React and Vite setup in 2026 for beginners: install Node.js, npm and VS Code, scaffold the app with Vite, and see what each tool actually does under the hood.
7 min readnpm vs pnpm: Comparing Storage, Speed, and Real-World Tradeoffs
This article compares how npm and pnpm handle dependency storage, installation speed, and monorepo workflows to help you choose the right tool for your project.
11 min read
About these articles
Request a 24h estimate
Need the same stack in a production operator layer? Send the brief — estimate within 24 hours.