7 posts about package security by 4 contributors.
Know package security? Share what you know with developers who are learning it.
Learn how to evaluate NuGet packages before adding them to a .NET project by checking metadata, framework compatibility, dependencies, licenses, and known vulnerabilities.
Learn how to evaluate NuGet packages before adding them to a .NET project by checking metadata, compatibility, dependencies, licenses, and known vulnerabilities.
Learn how npm trusted publishing uses CI/CD identities and OIDC, why configurations can expire, and what to review in GitHub Actions package publishing workflows.
Learn how npm staged publishing separates package preparation from promotion, enabling validation, safer CI/CD workflows, and reduced risk from incorrect releases.
Learn how NuGet Trusted Publishing enables keyless .NET package releases using modern identity-based authentication to reduce long-lived credential and supply chain risks.
Learn how NuGet Package Source Mapping prevents dependency confusion attacks in .NET applications by controlling package sources and securing software supply chains.
Learn how to detect dependency confusion attacks in enterprise .NET builds by identifying malicious packages, namespace conflicts, NuGet risks, and software supply chain threats.
DevSocialUpcoming · 3rd editionAI Agents ConferenceNov 23–27, 2026Live onlineMembers only17days leftRegisterPublish an article in this category and earn +1,000 SHARP when it is approved.
Write an article