BestHub
Sign in
Tagged articles

npm

214 articles · Page 2 of 3
Rare Earth Juejin Tech Community
Rare Earth Juejin Tech Community
Apr 24, 2022 · Backend Development

How to Properly Create a Qualified npm Package with TypeScript: A Step‑by‑Step Guide

This article walks readers through the complete process of building a well‑structured npm package using TypeScript, covering project initialization, package.json configuration, essential tooling such as husky, lint‑staged, eslint, prettier, unit testing with Jest, and best practices for documentation and publishing.

ESLintJestLibrary
0 likes · 15 min read
How to Properly Create a Qualified npm Package with TypeScript: A Step‑by‑Step Guide
21CTO
21CTO
Apr 18, 2022 · Information Security

How Stolen OAuth Tokens Let Attackers Access Private GitHub Repositories

GitHub revealed that attackers exploited stolen OAuth tokens from third‑party services like Heroku and Travis‑CI to download private repository data, prompting a rapid revocation of tokens and ongoing investigation into the breach.

GitHubHerokuOAuth
0 likes · 3 min read
How Stolen OAuth Tokens Let Attackers Access Private GitHub Repositories
php Courses
php Courses
Apr 15, 2022 · Frontend Development

How npm run Executes Scripts and Uses node_modules/.bin in Vue CLI Projects

The article explains, through a mock interview, why running npm run xxx triggers npm to look up the script in package.json, creates local binary links in node_modules/.bin, and executes the corresponding command such as vue‑cli‑service serve without requiring a global installation.

Vue CLIfrontend developmentnode_modules
0 likes · 8 min read
How npm run Executes Scripts and Uses node_modules/.bin in Vue CLI Projects
ByteFE
ByteFE
Apr 8, 2022 · Backend Development

Curated Technical Articles: Backend, Frontend, and Development Insights

This collection highlights a free ByteDance backend training camp, alternatives to web frameworks, Node.js architecture, Flutter performance tricks, an underrated Deno overview, Chrome 100 updates, transitional architecture concepts, a Koa2 signaling server tutorial, a detailed Webpack component library guide, and a comprehensive comparison of npm, npx, cnpm, yarn, and pnpm.

BackendDenonodejs
0 likes · 5 min read
Curated Technical Articles: Backend, Frontend, and Development Insights
DaTaobao Tech
DaTaobao Tech
Mar 23, 2022 · Frontend Development

Why npm, Yarn, pnpm and Deno Manage Dependencies Differently – A Deep Dive

This article analyses the evolution of front‑end package managers—from npm's early nested modules to Yarn's lockfile and Plug'n'Play, pnpm's hard‑link strategy, cnpm/tnpm adaptations, and Deno's URL‑based imports—highlighting their dependency resolution mechanisms, trade‑offs, and remaining challenges.

DenoYARNdependency management
0 likes · 19 min read
Why npm, Yarn, pnpm and Deno Manage Dependencies Differently – A Deep Dive
IT Services Circle
IT Services Circle
Mar 17, 2022 · Information Security

Malicious npm Packages: The “peacenotwar” Incident and Its Impact on the Frontend Ecosystem

The article exposes a malicious npm package called peacenotwar, injected by a politically motivated author into the node‑ipc dependency of vue‑cli, which creates a hostile file on users in Russia and Belarus, prompting npm to block the package and highlighting the fragility of the frontend supply chain.

Frontend Ecosystemmalicious codenode-ipc
0 likes · 5 min read
Malicious npm Packages: The “peacenotwar” Incident and Its Impact on the Frontend Ecosystem
Tencent IMWeb Frontend Team
Tencent IMWeb Frontend Team
Mar 7, 2022 · Frontend Development

Boost Your Frontend QA: Top Tools for Pixel-Perfect Design Comparison

Design review often relies on manual screenshot comparison, but this guide introduces a range of Chrome extensions, desktop clients, and npm packages—such as Perfect Pixel, CSS Peeper, Design‑Compare, PixelEye, pixelmatch, and looks‑same—that streamline pixel‑perfect page comparison, improve implementation fidelity, and enable automated visual regression in CI pipelines.

Chrome extensionDesign Reviewfrontend
0 likes · 10 min read
Boost Your Frontend QA: Top Tools for Pixel-Perfect Design Comparison
vivo Internet Technology
vivo Internet Technology
Feb 16, 2022 · Backend Development

Design and Implementation of a Plugin Management Platform for Vivo Activity Components

The article describes Vivo’s plugin management platform for activity components, built with a Midway Node.js backend, Vue.js frontend, and MySQL, which automates component extraction, Markdown documentation, GitLab hook‑driven NPM package retrieval, and AST‑based export parsing to provide a reusable library that has already saved over 20 person‑days of development effort.

Component LibraryGitLabMidway
0 likes · 25 min read
Design and Implementation of a Plugin Management Platform for Vivo Activity Components
Programmer DD
Programmer DD
Jan 15, 2022 · Information Security

Why Did a Developer Sabotage Popular npm Packages Colors and Faker?

A wave of developers discovered their applications spewing garbled output after a malicious update to the widely used npm libraries colors and faker, revealing a deliberate sabotage by maintainer Marak Squires that sparked heated debate over open‑source ethics, corporate exploitation, and security responsibilities.

FakerSecuritycolors
0 likes · 9 min read
Why Did a Developer Sabotage Popular npm Packages Colors and Faker?
Alipay Experience Technology
Alipay Experience Technology
Jan 13, 2022 · Frontend Development

How to Install npm Packages in Seconds: Inside Ant Group’s tnpm Rapid Mode

This article analyzes why npm installations are slow, compares traditional flattening, pnpm, and cnpm approaches, and details Ant Group’s tnpm rapid mode optimizations—including server‑side dependency graphs, HTTP pre‑heating, tar merging, Rust‑based download, and a FUSE‑backed filesystem—that together achieve up to three‑fold speed improvements.

FUSERustdependency graph
0 likes · 21 min read
How to Install npm Packages in Seconds: Inside Ant Group’s tnpm Rapid Mode
Java Backend Technology
Java Backend Technology
Jan 13, 2022 · Information Security

Why Did the Colors and Faker NPM Packages Suddenly Break Thousands of Apps?

A recent malicious update to the popular npm libraries colors and faker introduced an infinite‑loop bug that flooded consoles with Zalgo‑style text, prompting developers to roll back versions, sparking heated community debate, and highlighting broader issues of open‑source exploitation and corporate reliance on free code.

Faker.jscolors.jsmalicious update
0 likes · 8 min read
Why Did the Colors and Faker NPM Packages Suddenly Break Thousands of Apps?
HomeTech
HomeTech
Dec 29, 2021 · Information Security

2021 npm Year‑End Review: Major Releases, Supply‑Chain Attacks, and Future Outlook

The article reviews npm’s 2021 milestones—including the official release of npm 7.0 with performance gains and new features—while highlighting a wave of supply‑chain attacks on popular packages, discussing the rise of Corepack, and offering a forward‑looking perspective on the ecosystem’s challenges and opportunities.

CorepackNode.jsSecurity
0 likes · 9 min read
2021 npm Year‑End Review: Major Releases, Supply‑Chain Attacks, and Future Outlook
The Dominant Programmer
The Dominant Programmer
Dec 28, 2021 · Backend Development

How to Install and Run Node-RED on CentOS 7 via npm

This guide walks through installing Node on CentOS 7, using npm to install Node-RED globally, launching the service, and opening the firewall so the editor is reachable at port 1880, including the required unsafe-perm flag for proper permission handling.

InstallationNode-REDNode.js
0 likes · 2 min read
How to Install and Run Node-RED on CentOS 7 via npm
Alipay Experience Technology
Alipay Experience Technology
Dec 20, 2021 · Frontend Development

Unlocking Bundleless Frontend: Ant Group’s Cloud Phoenix Uses ES Modules for Low‑Code Asset Loading

Ant Group’s Cloud Phoenix platform demonstrates a Bundleless asset loading strategy that combines ES Modules, NPM imports, and fine‑grained tree‑shaking to deliver low‑code, on‑demand component delivery, addressing performance bottlenecks and redundancy in enterprise middle‑office applications while paving the way for future ES Module‑centric development.

ES Modulesasset loadingbundleless
0 likes · 15 min read
Unlocking Bundleless Frontend: Ant Group’s Cloud Phoenix Uses ES Modules for Low‑Code Asset Loading
DevOps Cloud Academy
DevOps Cloud Academy
Nov 16, 2021 · Operations

Publishing Packages to GitHub Packages with GitHub Actions

This guide explains how to use GitHub Packages as a unified package registry and demonstrates step‑by‑step how to configure npm, create a workflow file, and automatically publish a Node.js package to GitHub Packages via GitHub Actions whenever a new release is created.

CI/CDDevOpsGitHub Actions
0 likes · 4 min read
Publishing Packages to GitHub Packages with GitHub Actions
JavaScript
JavaScript
Nov 10, 2021 · Information Security

Critical npm Package Hijack: How coa and rc Were Compromised and What to Do

A recent security breach compromised the popular npm packages coa and rc, injecting ransomware‑capable code that can steal browser passwords, record keystrokes and screenshots, prompting developers to lock specific versions and enable two‑factor authentication to protect their projects.

COARCRansomware
0 likes · 3 min read
Critical npm Package Hijack: How coa and rc Were Compromised and What to Do
Taobao Frontend Technology
Taobao Frontend Technology
Oct 12, 2021 · Backend Development

Fix Windows Build Tools Errors for Node.js Native Modules

Learn how to troubleshoot and permanently fix Windows Build Tools installation issues for Node.js native modules, covering PowerShell language mode, registry tweaks, environment variables, and both automatic and manual Visual Studio 2019 Build Tools setups.

Visual StudioWindows Build Toolsnode-gyp
0 likes · 8 min read
Fix Windows Build Tools Errors for Node.js Native Modules
TikTok Frontend Technology Team
TikTok Frontend Technology Team
Oct 11, 2021 · Frontend Development

Deep Dive into Lerna Publish: Initialization, Scenarios, and Execution Flow

This article explains how the Lerna publish command works, detailing the different publishing scenarios, the internal initialization steps such as configureProperties and initialize, and the final execution phase that validates npm access, updates dependencies, packs packages, and publishes them to the npm registry.

Lernanpmpackage-management
0 likes · 26 min read
Deep Dive into Lerna Publish: Initialization, Scenarios, and Execution Flow
ByteFE
ByteFE
Aug 16, 2021 · Backend Development

Understanding yarn.lock: Why It Changes and How to Manage It

This article explains the purpose and structure of yarn.lock, why it may show unexpected diffs after dependency updates, and provides practical strategies—including using resolutions, frozen lockfiles, and preventive workflows—to keep package.json and yarn.lock in sync and avoid build issues.

YARNdependency-managementlockfile
0 likes · 12 min read
Understanding yarn.lock: Why It Changes and How to Manage It
WeDoctor Frontend Technology
WeDoctor Frontend Technology
Jul 14, 2021 · Frontend Development

Mastering Module Federation: From NPM Sharing to Advanced Remote Loading

This article explains how to share UI modules via NPM packages and Module Federation, compares traditional iframe approaches, dives into low‑level and high‑level concepts, demonstrates practical webpack configurations, version‑selection strategies, and runtime loading mechanisms with detailed code examples.

Frontend ArchitectureJavaScriptMicro Frontends
0 likes · 20 min read
Mastering Module Federation: From NPM Sharing to Advanced Remote Loading
JavaScript
JavaScript
Apr 21, 2021 · Backend Development

What’s New in Node.js 16.0.0? Key Updates and Features

Node.js 16.0.0, built on the V8 engine, introduces a stabilized Timers Promises API, Apple Silicon pre‑built binaries, V8 9.0 upgrades, global btoa/atob functions, and npm 7.10.0, marking a significant step forward for JavaScript runtime performance and compatibility.

Apple SiliconBackendV8
0 likes · 1 min read
What’s New in Node.js 16.0.0? Key Updates and Features
JD Retail Technology
JD Retail Technology
Mar 18, 2021 · Frontend Development

Architecture Upgrade of the Tongtian Tower Frontend Platform Using Git Submodule, Workspace, and NPM Packages

This article details how the Tongtian Tower front‑end platform was refactored to support multiple sites by extracting common modules, adopting Git Submodule combined with Yarn workspaces, and integrating npm packages, thereby reducing development time and improving maintainability across international and commercial projects.

Workspacemodule-reusenpm
0 likes · 13 min read
Architecture Upgrade of the Tongtian Tower Frontend Platform Using Git Submodule, Workspace, and NPM Packages
21CTO
21CTO
Feb 16, 2021 · Information Security

How Hackers Exploit Dependency Confusion to Hijack Packages and Earn Bounties

Security researcher Alex Birsan demonstrates how simple dependency‑confusion attacks—registering private package names on public registries like npm, PyPI, and RubyGems—can silently compromise internal build systems of major tech firms, yielding high‑value bug bounties while exposing systemic risks in package management.

Supply Chainbug bountydependency confusion
0 likes · 14 min read
How Hackers Exploit Dependency Confusion to Hijack Packages and Earn Bounties
ITPUB
ITPUB
Feb 15, 2021 · Information Security

How Hackers Exploit Dependency Confusion to Breach Major Tech Companies

This article explains how simple yet powerful dependency‑confusion attacks let attackers upload malicious packages to public registries, exfiltrate data via DNS, and compromise internal systems of companies like PayPal, Shopify, Apple and others, highlighting the methodology, results, root causes and mitigation ideas.

bug bountydependency confusionnpm
0 likes · 13 min read
How Hackers Exploit Dependency Confusion to Breach Major Tech Companies
ELab Team
ELab Team
Feb 9, 2021 · Frontend Development

Why Yarn Beats npm: Deep Dive into Its Architecture and Workflow

This article explores Yarn’s architecture and workflow, comparing it with npm, cnpm, and pnpm, detailing multi‑threaded installation, caching, dependency resolution, lockfile handling, and step‑by‑step processes from package fetching to linking, optimization, and common Q&A, illustrated with code snippets.

YARNdependency resolutionnpm
0 likes · 22 min read
Why Yarn Beats npm: Deep Dive into Its Architecture and Workflow
Sohu Tech Products
Sohu Tech Products
Feb 3, 2021 · Frontend Development

Using clipboard.js for Lightweight Clipboard Operations in Frontend Development

This guide explains why clipboard.js is a lightweight, dependency‑free solution for copying and cutting text, shows how to install it via npm or CDN, demonstrates configuration and various usage patterns—including data attributes, event handling, advanced options, and a Vue 3 integration—while also covering browser support.

Vue3clipboardclipboard.js
0 likes · 8 min read
Using clipboard.js for Lightweight Clipboard Operations in Frontend Development
360 Tech Engineering
360 Tech Engineering
Dec 18, 2020 · Frontend Development

Cancelling Duplicate Axios Requests and Building a Reusable Wrapper

This guide explains the scenarios that cause duplicate HTTP requests in web applications, demonstrates two Axios cancellation techniques, and shows how to encapsulate the logic in a reusable module with request tracking, interceptor integration, npm linking, and open‑source contribution steps.

JavaScriptaxioscancellation
0 likes · 9 min read
Cancelling Duplicate Axios Requests and Building a Reusable Wrapper
政采云技术
政采云技术
Dec 8, 2020 · Backend Development

Setting Up an NPM Private Registry: Docker Deployment, Data Migration, and OSS Disaster Recovery

This article provides a step‑by‑step guide to building an NPM private registry using Cnpmjs.org, covering containerized deployment with Docker, migrating packages from Verdaccio, implementing OSS disaster‑recovery backups, configuring email notifications, and tips for further customization.

BackendPrivate Registrydata migration
0 likes · 13 min read
Setting Up an NPM Private Registry: Docker Deployment, Data Migration, and OSS Disaster Recovery
Beike Product & Technology
Beike Product & Technology
Nov 18, 2020 · Backend Development

How to Set Up a Private npm Registry with cnpmjs on Ubuntu

This guide explains how to build a private npm registry on Ubuntu using cnpmjs, covering MySQL installation, server configuration, repository setup, package publishing, and synchronization options, providing step‑by‑step commands and troubleshooting tips for a stable internal package management solution.

MySQLPM2Private Registry
0 likes · 10 min read
How to Set Up a Private npm Registry with cnpmjs on Ubuntu
Programmer DD
Programmer DD
Oct 23, 2020 · Backend Development

Node.js 15 Released: npm7 Support, Throw Mode, and New Runtime Features

Node.js 15, the latest runtime release, replaces Node.js 14 as the active line, introduces npm 7 with workspace and peer‑dependency auto‑install, switches unhandled promise rejections to throw mode, adds N‑API 7, updates V8 to 8.6, and includes QUIC support, though it is not yet LTS and isn’t recommended for production.

JavaScriptNode.jsnpm
0 likes · 3 min read
Node.js 15 Released: npm7 Support, Throw Mode, and New Runtime Features
Aotu Lab
Aotu Lab
Oct 22, 2020 · Frontend Development

October Tech Highlights: NPM 7, HTTP/3, Webpack 5 Federation, iOS Scroll Physics

This article reviews October's key tech updates, covering NPM v7's new workspace and peer‑dependency features, Chrome's rollout of HTTP/3 over QUIC, Webpack 5's Module Federation for JavaScript architecture, the physics behind iOS UIScrollView animations, Chinese web‑font handling, the lightweight SVGA animation format, and a 1 KB JavaScript 3D game demo.

AnimationQUIChttp3
0 likes · 6 min read
October Tech Highlights: NPM 7, HTTP/3, Webpack 5 Federation, iOS Scroll Physics
NetEase Cloud Music Tech Team
NetEase Cloud Music Tech Team
Oct 12, 2020 · Frontend Development

How to Private‑Deploy and Customize CodeSandbox for a Cross‑Project Component Platform

This article explains the background, challenges, and step‑by‑step process of privately deploying and extending CodeSandbox—including building a custom online IDE, configuring a private npm registry, modifying the packager service, adding screenshot and style‑injection features, and integrating with Bit for component sharing.

CodeSandboxDockerbit
0 likes · 25 min read
How to Private‑Deploy and Customize CodeSandbox for a Cross‑Project Component Platform
JD Retail Technology
JD Retail Technology
Sep 3, 2020 · Frontend Development

Step‑by‑Step Guide to Building and Publishing a React Component Library with CRA, Docz, and Netlify

This article provides a comprehensive, step‑by‑step tutorial on creating, documenting, and publishing a React component library using create‑react‑app, TypeScript, docz, npm linking, and Netlify, covering configuration, build scripts, on‑demand loading, and deployment best practices.

Component LibraryDoczNetlify
0 likes · 21 min read
Step‑by‑Step Guide to Building and Publishing a React Component Library with CRA, Docz, and Netlify
政采云技术
政采云技术
Aug 23, 2020 · Frontend Development

Overlooked Details in npm Dependency Management

This article explains the inner workings of npm installation, the differences between npm 2 and npm 3, the purpose and structure of package‑lock.json, and the various dependency types such as dependencies, devDependencies, optionalDependencies, peerDependencies, and bundledDependencies, providing practical guidance for developers.

dependency managementnode_modulesnpm
0 likes · 14 min read
Overlooked Details in npm Dependency Management
JD Tech Talk
JD Tech Talk
Aug 19, 2020 · Frontend Development

Step‑by‑Step Guide to Building and Publishing a React Component Library with Create‑React‑App, Docz, and Netlify

This article provides a comprehensive, hands‑on tutorial for quickly creating a React component library using create‑react‑app, configuring TypeScript, ESLint, node‑sass, docz documentation, npm publishing, tree‑shaking, on‑demand loading, and deploying the generated docs to Netlify.

Component LibraryDoczNetlify
0 likes · 20 min read
Step‑by‑Step Guide to Building and Publishing a React Component Library with Create‑React‑App, Docz, and Netlify
WeDoctor Frontend Technology
WeDoctor Frontend Technology
May 19, 2020 · Backend Development

What Really Happened with the is-promise NPM Incident? A Deep Dive

The article investigates the April 25 NPM outage caused by the is-promise package, explains the buggy code and the problematic "type" and "exports" fields in package.json, reviews the rapid fix timeline, and offers practical lessons for developers to avoid similar dependency mishaps.

Exportsdependency managementis-promise
0 likes · 15 min read
What Really Happened with the is-promise NPM Incident? A Deep Dive
Sohu Tech Products
Sohu Tech Products
Mar 18, 2020 · Backend Development

Node.js Quick Start Tutorial: Environment, Global Objects, Modules, CLI, npm, and Event Handling

This tutorial provides a comprehensive introduction to Node.js, covering its runtime environment, core global objects, module system, command‑line interface development, npm package management, script automation, and event handling with practical code examples and explanations for front‑end engineers transitioning to back‑end development.

CLIEventEmitterModules
0 likes · 31 min read
Node.js Quick Start Tutorial: Environment, Global Objects, Modules, CLI, npm, and Event Handling
vivo Internet Technology
vivo Internet Technology
Feb 27, 2020 · Backend Development

Node.js: History, Core Technologies, and Current Landscape

Node.js, a JavaScript runtime built on Chrome’s V8 engine, originated in 2009 when Ryan Dahl applied event‑driven, asynchronous I/O to achieve high‑concurrency server‑side performance, and has since grown into a widely adopted platform—supported by npm, governed by the OpenJS Foundation, and used for scalable I/O‑intensive web, enterprise, and data applications despite challenges like callback complexity and package‑registry incidents.

BackendNode.jsV8
0 likes · 15 min read
Node.js: History, Core Technologies, and Current Landscape
Product Technology Team
Product Technology Team
Feb 19, 2020 · Frontend Development

How Zhenkun Built a Unified Frontend Tech Stack for Rapid Scaling

This article details how Zhenkun's frontend team responded to fast business growth by unifying their tech stack—introducing a private npm registry, a custom CLI scaffolding tool, Node.js backend, mock services, standardized webpack builds, DevOps automation, static resource delivery, monitoring, visual editors, UI component libraries, and automated testing—to boost development efficiency and maintainability across multiple locations.

DevOpsScaffoldingautomation
0 likes · 15 min read
How Zhenkun Built a Unified Frontend Tech Stack for Rapid Scaling
Node Underground
Node Underground
Dec 15, 2019 · Information Security

How NPM’s Binary Planting Bug Lets Attackers Access Any File

The article explains two critical npm vulnerabilities—arbitrary file access via a crafted bin field and binary planting that lets globally installed packages replace executables—detailing their impact, how they can be exploited, and urging users to upgrade promptly.

SecurityVulnerabilitybinary planting
0 likes · 4 min read
How NPM’s Binary Planting Bug Lets Attackers Access Any File
Sohu Tech Products
Sohu Tech Products
Nov 13, 2019 · Frontend Development

How to Properly Publish an NPM Package: Best Practices and Guidelines

This article explains the complete workflow for publishing a high‑quality NPM package, covering component‑oriented thinking, directory and configuration conventions, package.json standards, development processes, commit and changelog practices, quality assurance with linting, testing and type systems, as well as documentation and demo requirements.

Best PracticesComponent Developmentfrontend
0 likes · 20 min read
How to Properly Publish an NPM Package: Best Practices and Guidelines
DevOps Cloud Academy
DevOps Cloud Academy
Nov 11, 2019 · Frontend Development

Resolving node‑sass Binary Download Issues in Internal DevOps Environments

This article explains why node‑sass binary downloads fail on internal DevOps platforms, analyzes the underlying proxy and Python2 requirements, and presents three practical solutions—including setting network proxies, configuring SASS_BINARY_PATH or SASS_BINARY_SITE, and deploying an internal npm mirror—to enable seamless frontend builds without modifying build commands.

Frontend BuildProxybinary-dependencies
0 likes · 6 min read
Resolving node‑sass Binary Download Issues in Internal DevOps Environments
Node Underground
Node Underground
Oct 20, 2019 · Backend Development

Stabilize Your npm Packages with ncc: Avoid Dependency Nightmares

This article explains why npm package version changes can break projects, illustrates common pitfalls with examples, and shows how using the ncc tool to bundle dependencies into a single JavaScript file can make installations faster, smaller, and more reliable.

Node.jsdependency managementncc
0 likes · 6 min read
Stabilize Your npm Packages with ncc: Avoid Dependency Nightmares
Beike Product & Technology
Beike Product & Technology
Sep 6, 2019 · Backend Development

How to Build and Publish a Simple Node.js CLI Tool

This article guides JavaScript developers through creating a simple Node.js command-line interface (CLI) tool from scratch, covering setup, scripting, permission handling, environment variables, npm packaging, publishing, and best practices, enabling efficient custom command creation.

CLICommand-lineNode.js
0 likes · 11 min read
How to Build and Publish a Simple Node.js CLI Tool
Beike Product & Technology
Beike Product & Technology
Jul 26, 2019 · Frontend Development

Building a CLI Scaffolding Tool for React and Vue Projects

This article walks through the design and implementation of a Node‑based command‑line tool that generates React or Vue project scaffolds, covering initialization, script development, template downloading, local testing, npm publishing, and usage instructions.

CLINode.jsReAct
0 likes · 10 min read
Building a CLI Scaffolding Tool for React and Vue Projects
macrozheng
macrozheng
Jul 4, 2019 · Frontend Development

How to Install and Deploy Mall Admin Frontend on Windows and Linux

This guide walks you through downloading Node.js, obtaining the mall‑admin‑web source code, installing dependencies, and launching the front‑end application on both Windows and Linux, including steps for using a local backend or an online API and configuring Nginx for production.

frontendnodejsnpm
0 likes · 6 min read
How to Install and Deploy Mall Admin Frontend on Windows and Linux
System Architect Go
System Architect Go
Jul 2, 2019 · Backend Development

Comparing Go and Node.js: Key Features for Node.js Developers

This article compares Go and Node.js from a Node.js developer’s viewpoint, highlighting Go’s static typing, compiled nature, enforced formatting, built‑in libraries, package management, and tooling, and provides resources for learning Go effectively.

Go modulesNode.jscompiled language
0 likes · 7 min read
Comparing Go and Node.js: Key Features for Node.js Developers
360 Tech Engineering
360 Tech Engineering
Apr 15, 2019 · Backend Development

A Guide to Useful Node.js Command‑Line Tools and Packages

This article explains the Unix‑style philosophy behind command‑line programs, describes how Node.js enables powerful CLI development, and introduces essential tools such as n/nvm, nodemon, npx, nrm, commander, progress, chalk, inquirer, ora, puppeteer, as well as best practices for publishing scoped npm packages.

CLIbackend developmentcommand-line-tools
0 likes · 17 min read
A Guide to Useful Node.js Command‑Line Tools and Packages
Node Underground
Node Underground
Feb 28, 2019 · Information Security

10 Essential npm Security Practices Every Developer Should Follow

This article outlines ten critical npm security best practices—from avoiding secret leaks and using lockfiles to enabling two‑factor authentication and understanding typosquatting—helping front‑end and back‑end developers safeguard their projects against common package‑related vulnerabilities.

Best PracticesSecuritynpm
0 likes · 2 min read
10 Essential npm Security Practices Every Developer Should Follow
21CTO
21CTO
Nov 27, 2018 · Information Security

event-stream NPM Trojan: How a Bitcoin‑Mining Backdoor Sneaked In

The article explains how the popular Node.js package event-stream was transferred to a new maintainer who injected a malicious flatmap-stream module that steals Bitcoin, outlines the timeline of the supply‑chain attack, and provides steps for developers to detect and remediate the infection.

Event StreamMalwareSecurity
0 likes · 6 min read
event-stream NPM Trojan: How a Bitcoin‑Mining Backdoor Sneaked In
Tencent IMWeb Frontend Team
Tencent IMWeb Frontend Team
Nov 15, 2018 · Backend Development

How to Build Your Own Command-Line Tool with Node.js

This guide explains what a command-line interface (CLI) tool is, why developers prefer CLI over GUI for efficiency, and provides a step‑by‑step tutorial for creating a simple Node.js‑based CLI, covering project setup, command registration, argument parsing, version handling, interactive prompts, shell script execution, and network proxy management.

CLICommanderNode.js
0 likes · 10 min read
How to Build Your Own Command-Line Tool with Node.js
JD Tech
JD Tech
Aug 30, 2018 · Frontend Development

Introducing Taro UI: A Multi‑Platform UI Component Library for Taro

Taro UI is a multi‑end UI component library built by the Aotu Lab, offering easy installation, rich components, and seamless adaptation across WeChat mini‑programs, H5, and ReactNative, with detailed quick‑start instructions and code examples for developers.

TaROUI Componentsdocumentation
0 likes · 5 min read
Introducing Taro UI: A Multi‑Platform UI Component Library for Taro
Java Architect Essentials
Java Architect Essentials
Jun 21, 2018 · Frontend Development

Setting Up a React Development Environment on macOS

This guide walks through installing Node.js, configuring npm with a Chinese mirror, and using create‑react‑app to quickly create and run a React project on macOS, including all necessary command‑line steps and code snippets.

Node.jsReActcreate-react-app
0 likes · 6 min read
Setting Up a React Development Environment on macOS
JD Tech
JD Tech
Apr 10, 2018 · Frontend Development

How to Make an npm Package Support Tree Shaking Using the pkg.module Field

This article explains the concept of Tree Shaking, compares CommonJS and ES6 module formats, shows how to configure npm's pkg.module field and bundler settings (Webpack and Rollup) so that a package can be tree‑shakable while remaining compatible with existing tooling.

Module BundlingRollupes6
0 likes · 7 min read
How to Make an npm Package Support Tree Shaking Using the pkg.module Field
Tencent Cloud Developer
Tencent Cloud Developer
Mar 26, 2018 · Backend Development

Comprehensive Guide to npm: Initialization, Dependency Management, Versioning, Scripts, and Best Practices

This comprehensive npm guide explains initializing projects with npm init (including custom defaults), installing and linking local, Git, or private packages, understanding version‑tree changes across npm 2‑5, using semver, managing dependencies and lock files, leveraging npm scripts, npx, configuration files, engine constraints, and essential best‑practice recommendations for stable, reproducible front‑end development.

dependencynpmnpm scripts
0 likes · 31 min read
Comprehensive Guide to npm: Initialization, Dependency Management, Versioning, Scripts, and Best Practices
21CTO
21CTO
Jan 23, 2018 · Backend Development

Master npm: Install, Manage, and Optimize Node.js Packages Efficiently

This tutorial walks you through installing Node.js, configuring npm to avoid permission issues, using npm in both global and local modes, managing package versions with package.json, searching for packages, cleaning the cache, and leveraging version managers, providing a complete guide for modern JavaScript development.

JavaScriptNode.jsnpm
0 likes · 16 min read
Master npm: Install, Manage, and Optimize Node.js Packages Efficiently
21CTO
21CTO
Jan 13, 2018 · Frontend Development

Which JavaScript Frameworks Ruled 2017? npm’s State‑of‑JS Report Revealed

The 2017 npm State of JavaScript report analyzes the popularity and growth of major front‑end frameworks—React, Preact, Angular, Ember, Vue, and Backbone—showing dramatic shifts, rapid adoption rates, and guidance for developers choosing the right tool for their projects.

JavaScriptReActVue
0 likes · 6 min read
Which JavaScript Frameworks Ruled 2017? npm’s State‑of‑JS Report Revealed
System Architect Go
System Architect Go
Jan 10, 2018 · Backend Development

Using npm-check and ESLint to Detect and Remove Unused npm Packages

This guide explains how to install and use npm-check together with ESLint to identify outdated, incorrect, or unused dependencies in a Node.js project, remove unnecessary require statements, and ensure that only needed packages remain in the codebase.

ESLintUnused Dependenciesdependency-management
0 likes · 3 min read
Using npm-check and ESLint to Detect and Remove Unused npm Packages
JavaScript
JavaScript
Sep 18, 2017 · Backend Development

How to Install and Use cli-dict: A Command-Line Translation Tool

This guide explains how to install the cli-dict npm package globally, demonstrates basic Chinese‑English translation commands with examples, lists available command‑line options, and notes the current translation source and contribution invitation.

Toolcommand-linenodejs
0 likes · 1 min read
How to Install and Use cli-dict: A Command-Line Translation Tool
Aotu Lab
Aotu Lab
Aug 31, 2017 · Frontend Development

Discover AT-UI: A Fresh Vue‑Based UI Component Library for Rapid PC Development

AT‑UI is a fresh Vue 2.x based UI component library for rapid PC website development, offering Vue components, npm/webpack workflow, independent CSS styling, clear project background, vision, and detailed installation instructions via npm or direct script tags, with links to its website and GitHub repository.

AT-UIUI Componentsnpm
0 likes · 5 min read
Discover AT-UI: A Fresh Vue‑Based UI Component Library for Rapid PC Development
Architecture Digest
Architecture Digest
Aug 14, 2017 · Frontend Development

An Overview of Modern Front-End Development Workflow and Tools

This article provides a comprehensive overview of the front‑end development workflow, explaining core concepts like HTML, CSS, JavaScript, and detailing essential tools such as npm, Babel, Gulp, Webpack, and popular frameworks like React and Vue, while addressing their roles and interactions.

BabelJavaScriptReAct
0 likes · 8 min read
An Overview of Modern Front-End Development Workflow and Tools
Aotu Lab
Aotu Lab
Aug 3, 2017 · Frontend Development

Build PC Web Interfaces Fast with AT-UI Vue.js Component Library

AT-UI is a Vue.js‑based UI component library that offers independent styling, npm‑webpack workflow, and easy global or local component usage, supporting modern browsers, IE9+, and Electron, with clear installation and contribution guidelines for rapid PC web development.

AT-UIUI libraryVue.js
0 likes · 4 min read
Build PC Web Interfaces Fast with AT-UI Vue.js Component Library
Tencent IMWeb Frontend Team
Tencent IMWeb Frontend Team
Jul 30, 2017 · Frontend Development

This Week's Front‑End News: React License Drama, New npm Features, and More

A roundup of this week's front‑end highlights includes NetEase's new "Dream Werewolf" game, Apple's iPod discontinuation, Facebook Messenger 2.1 with embedded NLP, React's licensing controversy, npm 5.3.0 updates, Expo SDK v19.0.0, Angular releases, Google IPv6 stats, the Facets visualization tool, and Adobe's Flash sunset.

JavaScriptNewsfrontend
0 likes · 6 min read
This Week's Front‑End News: React License Drama, New npm Features, and More
Tencent Music Tech Team
Tencent Music Tech Team
Jun 23, 2017 · Backend Development

New Features and Changes in npm@5: Detailed Overview and Comparison with Yarn

npm 5 introduces automatic package‑lock generation, default --save, enhanced Git and file‑dependency handling, new prepack/postpack scripts, stronger integrity checks, a fully managed cache and registry tweaks, while narrowing Yarn’s speed advantage despite early bugs, making it a compelling alternative for npm‑centric workflows.

YARNdependency managementnpm
0 likes · 15 min read
New Features and Changes in npm@5: Detailed Overview and Comparison with Yarn
Node Underground
Node Underground
Jun 22, 2017 · Backend Development

8 Essential Node.js Practices Every Backend Developer Should Follow

This article presents eight practical recommendations for Node.js developers, covering dependency locking, lifecycle scripts, modern JavaScript, promises with async/await, code formatting with Prettier, continuous integration testing, security headers via Helmet, and serving over HTTPS.

Best PracticesHTTPSNode.js
0 likes · 4 min read
8 Essential Node.js Practices Every Backend Developer Should Follow
Node Underground
Node Underground
Apr 14, 2017 · Backend Development

Boost Your Node.js Workflow: Essential npm Config Tricks You Need

Learn how to automate npm init, switch registries, adjust install log levels, and relocate global modules with simple npm config commands, empowering Node.js developers to streamline project setup, reduce repetitive prompts, and manage environments more efficiently.

CLINode.jsnpm
0 likes · 3 min read
Boost Your Node.js Workflow: Essential npm Config Tricks You Need
Qunar Tech Salon
Qunar Tech Salon
Mar 21, 2017 · Backend Development

Building a Simple Node.js CLI Generator in Five Steps

This tutorial explains how to create a Node.js command‑line generator from scratch by initializing a module, adding a CLI binary, integrating a template engine, parsing arguments and paths, and finally publishing the package to npm, all with clear code examples.

CLINode.jsNunjucks
0 likes · 12 min read
Building a Simple Node.js CLI Generator in Five Steps
System Architect Go
System Architect Go
Mar 6, 2017 · Backend Development

Understanding npm Scripts and Custom Commands in Node.js Projects

This article explains the role of the scripts section in a Node.js project's package.json, clarifies why commands like npm start work without the run keyword, and shows how to correctly execute custom scripts using npm run, helping developers avoid common pitfalls.

Node.jscommand linenpm
0 likes · 3 min read
Understanding npm Scripts and Custom Commands in Node.js Projects
Node Underground
Node Underground
Jan 19, 2017 · Backend Development

Essential Node.js Best Practices Every Developer Should Follow

This article expands on earlier Node.js best practices by offering concrete, actionable guidelines such as modularizing code, managing require statements, handling errors, using npm shortcuts, respecting versioning, and properly separating development and production dependencies.

Best Practicesdependency managementnodejs
0 likes · 3 min read
Essential Node.js Best Practices Every Developer Should Follow
Aotu Lab
Aotu Lab
Dec 9, 2016 · Frontend Development

How to Create ASCII Art with FIGlet: History, Tools, and Node.js Examples

This article explains what FIGlet is, traces its development from a simple C program to modern versions, and shows multiple ways to generate ASCII art—including online tools, editor plugins, and Node.js modules—plus practical usage scenarios and code samples.

ASCII artFIGletNode.js
0 likes · 7 min read
How to Create ASCII Art with FIGlet: History, Tools, and Node.js Examples
Node Underground
Node Underground
Dec 7, 2016 · Backend Development

7 Essential npm Tricks Every Developer Should Know

Discover seven practical npm tips—from listing globally installed packages and enabling command auto‑completion to checking security vulnerabilities, customizing per‑project configs, adjusting log levels, linking local dependencies, and enforcing engine strictness—each designed to streamline your Node.js workflow and boost productivity.

Securitycli tipsnpm
0 likes · 5 min read
7 Essential npm Tricks Every Developer Should Know