#packages

All your packages are belong to us

AI agents can write the code, choose the packages, and run the install. Who's checking what they just invited onto your machine? This week I'm joined by Ahmad Nassri, CTO of Socket and former CTO of npm. We get into the trust built into a package install, the new ways attackers are using agents, and what it takes to keep building without handing over the keys or your wallet.

Changelog · EN

CARE Packages Provided a Lifeline for World War II Survivors. Here’s How the Group Turned Leftover Army Rations Into an 80-Year Legacy

The organization began as the Cooperative for American Remittances to Europe, and it became a way for those in need to receive food, clothing and other necessities. It continues to aid people today

Smithsonian Magazine · EN

12 Node built-ins that replace npm packages

#​642 — September 24, 2026 Read on the Web ⚠️ We're taking a week off next week, so we'll be back on Thursday, October 8. __ Your editor, Peter Cooper Node.js Built-ins That Replaced npm Packages — A practical tour of 12 Node built-ins that replace packages like axios , dotenv , nodemon and chalk . Each is explained with its stability level in Node 24 LTS and gotchas that might make you want to stick with your existing dependency anyway. Flavio Copes CodeAF: The Open-Source Software Factory for Open Models — Instead of juggling a terminal for every agent, you get one window for every project.

Node Weekly · EN