Open source developer corrupts widely-used libraries, affecting tons of projects

This page summarizes the projects mentioned and recommended in the original post on /r/programming
Npm shrinkwrap lockfile package-json package-lock

SurveyJS - Open-Source JSON Form Builder to Create Dynamic Forms Right in Your App
With SurveyJS form UI libraries, you can build and style forms in a fully-integrated drag & drop form builder, render them in your JS app, and store form submission data in any backend, inc. PHP, ASP.NET Core, and Node.js.
surveyjs.io
featured
InfluxDB - Power Real-Time Data Analytics at Scale
Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
www.influxdata.com
featured

  • shrinkpack

    Fast, resilient, reproducible builds with npm install.

  • SurveyJS

    Open-Source JSON Form Builder to Create Dynamic Forms Right in Your App. With SurveyJS form UI libraries, you can build and style forms in a fully-integrated drag & drop form builder, render them in your JS app, and store form submission data in any backend, inc. PHP, ASP.NET Core, and Node.js.

    SurveyJS logo
NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts

  • Local package mirror for fast, safe, reproducible builds using NPM.

    1 project | /r/npm | 25 Aug 2022

  • Check-in NPM tarballs to freeze changes and install offline

    1 project | news.ycombinator.com | 11 Jan 2022

  • Check-in npm tarballs to freeze changes and install offline

    1 project | /r/javascript | 11 Jan 2022

  • Why you should pin your npm/yarn dependencies

    1 project | /r/javascript | 10 Jan 2022

  • The rising trend of malicious packages in open source ecosystems | Snyk

    2 projects | /r/netsec | 26 Mar 2023