npm-scripts
Safeguard articles tagged "npm-scripts" — guides, analysis, and best practices for software supply chain and application security.
3 articles
npm run dev: What It Does and How to Run It Safely
npm run dev starts your project's development server via a script in package.json. Here is what actually happens under the hood and the security risks worth knowing.
The npm prepare Script: What It Does and How to Use It Safely
The npm prepare lifecycle script runs at more moments than most developers realize, including when someone installs your package from git. Here is exactly when it fires and how to keep it from becoming an attack vector.
npm run: How Scripts Work and How to Use Them Safely
npm run executes the scripts defined in your package.json. Here is how it resolves commands, the lifecycle hooks that run automatically, and the supply-chain risks to watch.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.