tweetindex
DE

npm ✓

@npmjs · joined 02 Jun 2011

The package manager for JavaScript Problems? Visit https://t.co/WNuo1MMbMP or https://t.co/i3MoAdr5p5

147 560Followers
142Following
4 711Posts total
404KViews on collected posts

Neueste Beiträge

npm Granular Access Tokens that bypass 2FA can no longer manage your account, org, or packages—those actions now require an interactive 2FA challenge, closing a major credential-based attack surface. https://t.co/c4P47SKYfr 6K views · 21 likes · 4 reposts · 1 replies Open on X →
@npmjs Trusted publishing is basically giving your keys to a Microsoft employee 653 views · 8 likes · 0 reposts · 0 replies Open on X →
@npmjs that might be the biggest non-solution you could’ve possibly attempted to “solve” this 2K views · 14 likes · 0 reposts · 0 replies Open on X →
@npmjs @github You guys can’t even run a simple check on the package to see any discrepancies, especially in the post install 😂 1.5K views · 12 likes · 0 reposts · 0 replies Open on X →
npm is rotating write-scoped npm Granular Access Tokens that bypass 2FA as a precaution following a now-contained security incident. This doesn't affect GitHub personal access tokens. Maintainers should upgrade the npm CLI to v12+ and consider Trusted Publishing. 66.9K views · 518 likes · 122 reposts · 20 replies Open on X →
Strengthening npm supply-chain security: packages are now scanned for malware at publish time, before they can be installed. We're also introducing disclosure for legitimate dual-use tools so they aren't blocked by default. https://t.co/GAN3Qm05NA 7.7K views · 29 likes · 3 reposts · 5 replies Open on X →
npm v12 is here. npm install now blocks lifecycle scripts, git, and remote-URL dependencies by default — a more secure baseline out of the box. We're also starting to phase out npm 2FA-bypass tokens for account changes and direct publishing. Details 👇 https://t.co/HI4tSNOO3l 14.8K views · 114 likes · 19 reposts · 2 replies Open on X →
@npmjs Crazy how y’all put in the least amount of effort into this https://t.co/s3WmXraYcK 12.2K views · 193 likes · 2 reposts · 2 replies Open on X →
1/ To prevent supply chain attacks following the pattern of Mini Shai Hulud, we invalidated npm granular access tokens with write access that bypass 2FA. Update the stored token and rerun the workflow for your automations. 267.9K views · 1.5K likes · 190 reposts · 54 replies Open on X →
2/ Use npm Trusted Publishing to reduce reliance on such tokens. https://t.co/iZf76MeJAU 24.3K views · 123 likes · 5 reposts · 6 replies Open on X →

Im Vergleich zu Konten gleicher Größe

5 Beiträge aus den letzten 90 Tagen, verglichen mit der Größenklasse 100K–1M Follower. genau im Median seiner Follower-Klasse.

Medianaufrufe2 043dieses Konto5 983Median für 100K–1M
Reichweite, %1.38%dieses Konto1.49%Median für 100K–1M
Interaktion, %0.80%dieses Konto0.93%Median für 100K–1M
KennzahlDieses KontoMedian für 100K–1MVerhältnis
Medianaufrufe pro Beitrag2 0435 9830.34×
Reichweite (Aufrufe ÷ Follower)1.38%1.49%0.93×
Interaktionsrate0.80%0.93%0.86×

Weitere Konten dieser Größe →   Mit einem anderen Konto vergleichen →   Wie diese Vergleichswerte entstehen →

Growth & engagement

How the posts we collected actually performed: views and reaction rate post by post, what the audience did with them, and where the follower count goes.

Views per post

24.3K20 May
267.9K
12.2K
14.8K8 Jul
7.7K29 Jul
66.9K4 Aug
1.5K
2K
6535 Aug
6K13 Aug

Last 10 collected posts, oldest on the left. The scale is logarithmic: one post can outrun the rest a hundred times over.

Engagement rate per post

0.55%20 May
0.68%
1.63%
0.93%8 Jul
0.52%29 Jul
1.00%4 Aug
0.80%
0.69%
1.23%5 Aug
0.45%13 Aug

Reactions — likes, reposts, replies and quotes — divided by views. Median for 100K–1M accounts is 0.93%.

What the audience does

Likes68.6%2 560 in total
Reposts9.2%345 in total
Replies2.4%90 in total
Quotes1.8%68 in total
Bookmarks17.9%667 in total

Share of every reaction we collected for this account. Replies mean argument, reposts mean endorsement, bookmarks mean the post was worth keeping.

The follower curve appears once this account has two daily snapshots — we take one a day, and this one is on its first.

Ähnliche Konten