npm Best Practices for the Supply-Chain – Open Source Security FoundationBy Myles Borins (GitHub), Jordan Harband (No affiliation), Jeff Mendoza (Google), Erez Rokah (CloudQuery), Laurent Simon (Google), Liran Tal (Snyk), Randall T. Vasquez (Gentoo) We are excited to announce the v1 release of the “npm Best Practices,” a new guide focused on dependency management and supply chain security for npm. This release is the result of the OpenSSF Best Practices Working Group.
Outcomes from Open Source Software Security Summit in Japan – Open Source Security Foundation
package-manager-best-practices/published/npm.md at main · ossf/package-manager-best-practices
