Best of NPM โ€” January 2025

  1. 1
    Article
    Avatar of communityCommunity Picksยท1y

    Why PNPM? WTF?

    PNPM is a faster and disk-space-saving package manager for JavaScript that uses a symlink strategy to share dependencies across projects. It manages different dependency versions efficiently, saving disk space by reusing common files. While it's gaining popularity for its performance benefits, the decision to switch from NPM remains a personal choice.

  2. 2
    Article
    Avatar of communityCommunity Picksยท1y

    puffinsoft/jscanify: The Javascript document scanning library.

    jscanify is a JavaScript document scanning library powered by opencv.js. It supports web, NodeJS, and React platforms. The newly released version 1.3.0 offers glare suppression and multi-colored paper support. The same API provides better results, and a debugging tool is available for observing results on test images.

  3. 3
    Article
    Avatar of devsquadDev Squadยท1y

    Introducing pingflow โ€“ A CLI tool for testing your internet speed! ๐ŸŒ

    Pingflow is a CLI tool for real-time internet speed testing with a live progress bar, providing download speed in Mbps. It is easy to set up and works on Windows, macOS, and Linux. Install it using npm and then run the command 'pingflow' to test your speed.

  4. 4
    Article
    Avatar of tigerabrodiTiger's Placeยท1y

    How to build a library in React

    Learn how to build a React library that enhances React's context API with selectors. This guide covers the steps to create a context, set up a provider, use the `useContextSelector` and `useContextSetState` hooks, and integrate the `useSyncExternalStore` hook. Additional topics include using tsup for bundling and publishing your library to npm.

  5. 5
    Article
    Avatar of socketdevSocketยท1y

    Kill Switch Hidden in npm Packages Typosquatting Chalk and C...

    Malicious npm packages impersonating the widely-used libraries chokidar and chalk have been discovered. The attacker added a destructive 'kill switch' and data-exfiltration routines to these clones, potentially leading to data loss or exposure of environment variables. These imposter packages mimic legitimate ones, making them hard to distinguish without thorough checks.

  6. 6
    Article
    Avatar of devsquadDev Squadยท1y

    Dev Resources | Every resource you need as a developer to get started

    Dev Resources is a web app offering a curated list of essential tools, libraries, and resources for developers. It allows users to browse resources by category, filter, sort, and like to save favorites. Each resource includes titles, descriptions, and links to relevant documentation and repositories.