npm ✓

@npmjs · joined 02 Jun 2011

The package manager for JavaScript Problems? Visit https://t.co/WNuo1MMbMP or https://t.co/i3MoAdr5p5

147 560Followers

142Following

4 711Posts total

404KViews on collected posts

โพสต์ล่าสุด

npm ✓@npmjs13 Aug

npm Granular Access Tokens that bypass 2FA can no longer manage your account, org, or packages—those actions now require an interactive 2FA challenge, closing a major credential-based attack surface. https://t.co/c4P47SKYfr 6K views · 21 likes · 4 reposts · 1 replies Open on X →

npm ✓@npmjs5 Aug

@npmjs Trusted publishing is basically giving your keys to a Microsoft employee 653 views · 8 likes · 0 reposts · 0 replies Open on X →

npm ✓@npmjs4 Aug

@npmjs that might be the biggest non-solution you could’ve possibly attempted to “solve” this 2K views · 14 likes · 0 reposts · 0 replies Open on X →

npm ✓@npmjs4 Aug

@npmjs @github You guys can’t even run a simple check on the package to see any discrepancies, especially in the post install 😂 1.5K views · 12 likes · 0 reposts · 0 replies Open on X →

npm ✓@npmjs4 Aug

npm is rotating write-scoped npm Granular Access Tokens that bypass 2FA as a precaution following a now-contained security incident. This doesn't affect GitHub personal access tokens. Maintainers should upgrade the npm CLI to v12+ and consider Trusted Publishing. 66.9K views · 518 likes · 122 reposts · 20 replies Open on X →

npm ✓@npmjs29 Jul

Strengthening npm supply-chain security: packages are now scanned for malware at publish time, before they can be installed. We're also introducing disclosure for legitimate dual-use tools so they aren't blocked by default. https://t.co/GAN3Qm05NA 7.7K views · 29 likes · 3 reposts · 5 replies Open on X →

npm ✓@npmjs8 Jul

npm v12 is here. npm install now blocks lifecycle scripts, git, and remote-URL dependencies by default — a more secure baseline out of the box. We're also starting to phase out npm 2FA-bypass tokens for account changes and direct publishing. Details 👇 https://t.co/HI4tSNOO3l 14.8K views · 114 likes · 19 reposts · 2 replies Open on X →

npm ✓@npmjs20 May

@npmjs Crazy how y’all put in the least amount of effort into this https://t.co/s3WmXraYcK 12.2K views · 193 likes · 2 reposts · 2 replies Open on X →

npm ✓@npmjs20 May

1/ To prevent supply chain attacks following the pattern of Mini Shai Hulud, we invalidated npm granular access tokens with write access that bypass 2FA. Update the stored token and rerun the workflow for your automations. 267.9K views · 1.5K likes · 190 reposts · 54 replies Open on X →

npm ✓@npmjs20 May

2/ Use npm Trusted Publishing to reduce reliance on such tokens. https://t.co/iZf76MeJAU 24.3K views · 123 likes · 5 reposts · 6 replies Open on X →

เทียบกับบัญชีขนาดเดียวกัน

5 โพสต์จาก 90 วันที่ผ่านมา เทียบกับช่วง 100K–1M ผู้ติดตาม อยู่ที่ค่ามัธยฐานของช่วงผู้ติดตามพอดี.

ยอดดูมัธยฐาน2 043บัญชีนี้5 983ค่ามัธยฐานของ 100K–1M

การเข้าถึง, %1.38%บัญชีนี้1.49%ค่ามัธยฐานของ 100K–1M

การมีส่วนร่วม, %0.80%บัญชีนี้0.93%ค่ามัธยฐานของ 100K–1M

ตัวชี้วัด	บัญชีนี้	ค่ามัธยฐานของ 100K–1M	อัตราส่วน
ยอดดูมัธยฐานต่อโพสต์	2 043	5 983	0.34×
การเข้าถึง (ยอดดู ÷ ผู้ติดตาม)	1.38%	1.49%	0.93×
อัตราการมีส่วนร่วม	0.80%	0.93%	0.86×

บัญชีอื่นในช่วงนี้ → เปรียบเทียบกับบัญชีอื่น → ค่าอ้างอิงเหล่านี้คำนวณอย่างไร →

Growth & engagement

How the posts we collected actually performed: views and reaction rate post by post, what the audience did with them, and where the follower count goes.

Views per post

24.3K20 May

267.9K

12.2K

14.8K8 Jul

7.7K29 Jul

66.9K4 Aug

1.5K

6535 Aug

6K13 Aug

Last 10 collected posts, oldest on the left. The scale is logarithmic: one post can outrun the rest a hundred times over.

Engagement rate per post

0.55%20 May

0.68%

1.63%

0.93%8 Jul

0.52%29 Jul

1.00%4 Aug

0.80%

0.69%

1.23%5 Aug

0.45%13 Aug

Reactions — likes, reposts, replies and quotes — divided by views. Median for 100K–1M accounts is 0.93%.

What the audience does

Likes68.6%2 560 in total

Reposts9.2%345 in total

Replies2.4%90 in total

Quotes1.8%68 in total

Bookmarks17.9%667 in total

Share of every reaction we collected for this account. Replies mean argument, reposts mean endorsement, bookmarks mean the post was worth keeping.

The follower curve appears once this account has two daily snapshots — we take one a day, and this one is on its first.

โพสต์ล่าสุด

เทียบกับบัญชีขนาดเดียวกัน

Growth & engagement

Views per post

Engagement rate per post

What the audience does

บัญชีที่คล้ายกัน