tweetindex
ES

npm ✓

@npmjs · joined 02 Jun 2011

The package manager for JavaScript Problems? Visit https://t.co/WNuo1MMbMP or https://t.co/i3MoAdr5p5

147 560Followers
142Following
4 711Posts total
404KViews on collected posts

Últimas publicaciones

npm Granular Access Tokens that bypass 2FA can no longer manage your account, org, or packages—those actions now require an interactive 2FA challenge, closing a major credential-based attack surface. https://t.co/c4P47SKYfr 6K views · 21 likes · 4 reposts · 1 replies Open on X →
@npmjs Trusted publishing is basically giving your keys to a Microsoft employee 653 views · 8 likes · 0 reposts · 0 replies Open on X →
@npmjs that might be the biggest non-solution you could’ve possibly attempted to “solve” this 2K views · 14 likes · 0 reposts · 0 replies Open on X →
@npmjs @github You guys can’t even run a simple check on the package to see any discrepancies, especially in the post install 😂 1.5K views · 12 likes · 0 reposts · 0 replies Open on X →
npm is rotating write-scoped npm Granular Access Tokens that bypass 2FA as a precaution following a now-contained security incident. This doesn't affect GitHub personal access tokens. Maintainers should upgrade the npm CLI to v12+ and consider Trusted Publishing. 66.9K views · 518 likes · 122 reposts · 20 replies Open on X →
Strengthening npm supply-chain security: packages are now scanned for malware at publish time, before they can be installed. We're also introducing disclosure for legitimate dual-use tools so they aren't blocked by default. https://t.co/GAN3Qm05NA 7.7K views · 29 likes · 3 reposts · 5 replies Open on X →
npm v12 is here. npm install now blocks lifecycle scripts, git, and remote-URL dependencies by default — a more secure baseline out of the box. We're also starting to phase out npm 2FA-bypass tokens for account changes and direct publishing. Details 👇 https://t.co/HI4tSNOO3l 14.8K views · 114 likes · 19 reposts · 2 replies Open on X →
@npmjs Crazy how y’all put in the least amount of effort into this https://t.co/s3WmXraYcK 12.2K views · 193 likes · 2 reposts · 2 replies Open on X →
1/ To prevent supply chain attacks following the pattern of Mini Shai Hulud, we invalidated npm granular access tokens with write access that bypass 2FA. Update the stored token and rerun the workflow for your automations. 267.9K views · 1.5K likes · 190 reposts · 54 replies Open on X →
2/ Use npm Trusted Publishing to reduce reliance on such tokens. https://t.co/iZf76MeJAU 24.3K views · 123 likes · 5 reposts · 6 replies Open on X →

Frente a cuentas del mismo tamaño

5 publicaciones de los últimos 90 días, junto al rango de 100K–1M seguidores. justo en la mediana de su rango de seguidores.

Visualizaciones medianas2 043esta cuenta5 983mediana de 100K–1M
Alcance, %1.38%esta cuenta1.49%mediana de 100K–1M
Interacción, %0.80%esta cuenta0.93%mediana de 100K–1M
MétricaEsta cuentaMediana de 100K–1MProporción
Visualizaciones medianas por publicación2 0435 9830.34×
Alcance (visualizaciones ÷ seguidores)1.38%1.49%0.93×
Tasa de interacción0.80%0.93%0.86×

Otras cuentas de este rango →   Comparar con otra cuenta →   Cómo se construyen estas referencias →

Growth & engagement

How the posts we collected actually performed: views and reaction rate post by post, what the audience did with them, and where the follower count goes.

Views per post

24.3K20 May
267.9K
12.2K
14.8K8 Jul
7.7K29 Jul
66.9K4 Aug
1.5K
2K
6535 Aug
6K13 Aug

Last 10 collected posts, oldest on the left. The scale is logarithmic: one post can outrun the rest a hundred times over.

Engagement rate per post

0.55%20 May
0.68%
1.63%
0.93%8 Jul
0.52%29 Jul
1.00%4 Aug
0.80%
0.69%
1.23%5 Aug
0.45%13 Aug

Reactions — likes, reposts, replies and quotes — divided by views. Median for 100K–1M accounts is 0.93%.

What the audience does

Likes68.6%2 560 in total
Reposts9.2%345 in total
Replies2.4%90 in total
Quotes1.8%68 in total
Bookmarks17.9%667 in total

Share of every reaction we collected for this account. Replies mean argument, reposts mean endorsement, bookmarks mean the post was worth keeping.

The follower curve appears once this account has two daily snapshots — we take one a day, and this one is on its first.

Cuentas similares