This is a heavily interactive web application, and JavaScript is required. Simple HTML interfaces are possible, but that is not what this is.
Post
Matteo Collina
nodeland.dev
did:plc:2q7mnid6di5sxgzzpsdvdu47
What do you all think of NPM adding scanning of all packages during publish- a 15-minute delay during peak times?
What concerns me the most is:
1. false positives
2. the SLA for the "appeal process"
Anyway, good step!
https://github.blog/changelog/2026-07-28-npm-publish-time-malware-scanning-and-dual-use-metadata/
2026-07-29T13:10:30.468Z