Pinning NPM Modules to Reduce Supply Chain Risk
A practical guide to pinning dependency versions, enforcing release age, and using Dependabot and Snyk to reduce npm supply-chain risk.
ReadARTICLES
Thoughts on React, TypeScript, CSS, accessibility, and the craft of web engineering.
A practical guide to pinning dependency versions, enforcing release age, and using Dependabot and Snyk to reduce npm supply-chain risk.
ReadA practical guide to configuring Copilot MCP servers in VS Code, migrating from the older workspace setup, and pairing Context7, Playwright, and browser tools in real workflows.
ReadA practical migration guide from OpenCode v1 to v2, including MCP server setup, local model configuration, and the settings changes that make the upgrade feel smooth instead of disruptive.
ReadA senior-engineer playbook for keeping AI tooling off plaintext secrets by fetching API keys from the OS credential store only when a subprocess actually needs them.
Read