- [supply-chain-security · GitHub Topics · GitHub](https://github.com/topics/sup... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		dflock 3 months ago \| parent \| context \| favorite \| on: Tinycolor supply chain attack post-mortem - [supply-chain-security · GitHub Topics · GitHub](https://github.com/topics/supply-chain-security) - [GitHub - safedep/vet: Protect against malicious open source packages](https://github.com/safedep/vet) - [GitHub - AikidoSec/safe-chain](https://github.com/AikidoSec/safe-chain) - npm audit

indigodaddy 3 months ago [–]

vet and safe-chain look good thanks! I'm just dabbling with Node only (no experience really), so haven't used npm audit but will see how that works too. Appreciate the links.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact