DEV Community

# supplychain

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
npm Is on Fire: Why the Architecture Is the Product
vivian-voss profile

npm Is on Fire: Why the Architecture Is the Product

#npm #supplychain #security #freebsd
Comments
10 min read
The U.S.-China Tech Rivalry and Its Impact on the PCB Industry
maggie-pcb profile

The U.S.-China Tech Rivalry and Its Impact on the PCB Industry

#pcb #manufacturing #supplychain #productivity
Comments
5 min read
The Hidden Supply Chain Risk in Your `pip install`
easterndev profile

The Hidden Supply Chain Risk in Your `pip install`

#python #ai #supplychain #security
Comments
1 min read
Twelve Trust Boundaries: A Field Guide to Supply-Chain Defense After axios@1.14.1
ahmadkanj profile

Twelve Trust Boundaries: A Field Guide to Supply-Chain Defense After axios@1.14.1

#security #devsecops #githubactions #supplychain
Comments
28 min read
Twelve Trust Boundaries: A Field Guide to Supply-Chain Defense After axios@1.14.1
ahmadkanj profile

Twelve Trust Boundaries: A Field Guide to Supply-Chain Defense After axios@1.14.1

#security #devsecops #githubactions #supplychain
Comments
28 min read
Add Real Business Trust Signals to Claude Desktop in 60 Seconds
piiiico profile
Pico

Add Real Business Trust Signals to Claude Desktop in 60 Seconds

#npm #security #javascript #supplychain
Comments
2 min read
Add Trust Scoring to Your CI Pipeline in 5 Minutes
piiiico profile
Pico

Add Trust Scoring to Your CI Pipeline in 5 Minutes

#npm #security #javascript #supplychain
Comments
3 min read
AGENTS.md moved AI performance up a model tier. Package trust needs the same.
piiiico profile
Pico

AGENTS.md moved AI performance up a model tier. Package trust needs the same.

#npm #security #javascript #supplychain
Comments
2 min read
Twelve Trust Boundaries: A Field Guide to Supply-Chain Defense After axios@1.14.1
ahmadkanj profile

Twelve Trust Boundaries: A Field Guide to Supply-Chain Defense After axios@1.14.1

#security #devsecops #axios #supplychain
1
Comments
29 min read
Approve Once, Exploit Forever: The Trust Persistence Vulnerability Vendors Will Not Fix
toniantunovic profile

Approve Once, Exploit Forever: The Trust Persistence Vulnerability Vendors Will Not Fix

#security #claudecode #devsecops #supplychain
1
Comments
6 min read
Mini Shai-Hulud: un gusano de cadena de suministro que explotĂł TanStack y el ecosistema npm.
bush1dom4koto profile

Mini Shai-Hulud: un gusano de cadena de suministro que explotĂł TanStack y el ecosistema npm.

#cybersecurity #supplychain #npm #ciberseguridad
2
Comments
5 min read
How to Choose a PCB Manufacturer – A Practical Guide for Hardware Engineers
maggie-pcb profile

How to Choose a PCB Manufacturer – A Practical Guide for Hardware Engineers

#pcbmanufacturing #hardwareengineering #supplychain #smallbatch
Comments
4 min read
MCPwn Is Live. We Scanned the Supply Chains of 14 MCP Servers. Here's What We Found.
piiiico profile
Pico

MCPwn Is Live. We Scanned the Supply Chains of 14 MCP Servers. Here's What We Found.

#security #mcp #supplychain #javascript
Comments
5 min read
One Year of Liberation Day: What the Tariff Rollout Actually Revealed About AI Infrastructure
david_aronchick_ea415de50 profile

One Year of Liberation Day: What the Tariff Rollout Actually Revealed About AI Infrastructure

#ai #infrastructure #supplychain #distributedcomputing
Comments
8 min read
161 verified AI package hallucinations across 8.5M indexed — open dataset
depscope profile

161 verified AI package hallucinations across 8.5M indexed — open dataset

#ai #security #supplychain #mcp
Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.