Show HN: A VS Code extension buffers NPM updates to avoid supply chain attacks

Category: devtools

Tags: supply-chain-security, vscode-extension, npm, dependency-management, package-management

Score: 5.3/10 (Innovation: 5, Technical: 5, Documentation: 6, Utility: 6)

tinyNpm is a VS Code extension that helps prevent supply chain attacks by buffering NPM package updates for a configurable period before suggesting them. It also provides inline version info, security breakdowns, and private registry support, all with zero external runtime dependencies.

Target audience: backend devs, frontend devs, devops

Repository: https://marketplace.visualstudio.com/items?itemName=about14sheep.tinynpm

View on Hacker News