Dev tools · September 17, 2025
npm-daycare, an NPM proxy that filters out recent & small packages
Hey all! npm-daycare is a simple NPM proxy built on Verdaccio which filters all packages that: - are younger than 48h (it will just provide an old version instead) - have fewer than 5,000 weekly downloads https://github.com/stack-auth/npm-daycare This is in response to the recent supply chain attacks that shattered the JavaScript ecosystem [1]. It's likely not a problem that will go away any time soon, so we figured we'd build something to protect against it. Doing this on the proxy layer means it will work across the entire system, as proxies are set globally. In the…
npm-daycare, an NPM proxy that filters out recent & small packages launched on September 17, 2025 with 6 votes, #3,421 of 8,160 launches that month and more than 75% of that year's launches. The site was still online in September 2026, 1 year on.
What it does
Contribute to hexclave/npm-daycare development by creating an account on GitHub.
An npm registry proxy that doesn't include package versions released in the last 48h or packages with fewer than 5,000 downloads. docker run --pull=always --rm --name npm-daycare -p 4873:4873 bgodil/npm-daycare npm set registry http://localhost:4873/ pnpm config set registry http://localhost:4873/ yarn config set registry http://localhost:4873/ bun config set registry http://localhost:4873/ npm view @types/node # has recent updates npm view pgmock # has <5,000 weekly downloads That bootstraps the default policies immediately. Tweak MIN_WEEKLY_DOWNLOADS and MIN_AGE_HOURS if you need different X/Y thresholds. Public registries move fast and automated pipelines install new versions seconds…from github.com
In the maker’s words, at launch
Hey all! npm-daycare is a simple NPM proxy built on Verdaccio which filters all packages that: - are younger than 48h (it will just provide an old version instead) - have fewer than 5,000 weekly downloads https://github.com/stack-auth/npm-daycare This is in response to the recent supply chain…
Does a similar job
all alternatives →
Verdaccio – Open-Source Lightweight private NPM proxy registry2018 · verdaccio.org · ▲47A lightweight Node.js private proxy registry
Safe-NPM – only install packages that are +90 days oldNov 2025 · github.com · ▲90This past quarter has been awash with sophisticated npm supply chain attacks like [Shai-Hulud](https://www.cisa.gov/news-events/alerts/2025/09/23/widesprea...() and the [Chalk/debug Compromise](https://www.wiz.io/blog/widespread-npm-supply-chain-attack-b...). This CLI helps protect users from recently compromised packages by only downloading packages that have been public for a while (default is 90 days or older). Install: npm install -g @dendronhq/safe-npm Usage: safe-npm install react@^18 lodash How it works: - Queries…
I've been making JavaScript sandbox alone for 6 years2022 · playcode.io · ▲397Hi HN! Thanks for your attention to my post. It was a big challenge to run most of Node.js packages in browser, fast moreover. Virtual File system, resolve import/export. I got cold many times, depressions, burned out, yet still alive and finished it. Many guys helped me with an advice. Many users give a lot of positive feedback. There are 200,000 monthly unique users. I work full time now because of the freemium business model. To be honest - I am happy after many years of hard work.
a Node.js personal cloud you can hack, host and delete2013 · cozy.io · ▲65✅ Français ✅ Open source ✅ Sécurisé ✅ Gratuit jusqu’à 5 Go de stockage
More dev tools this month
the category →
Contribute to oosexgang/hackios-xnu-kernel development by creating an account on GitHub.
Dev tools · 1d ago · github.com
open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.
Dev tools · 29d ago · github.com
Contribute to reladraw/reladraw development by creating an account on GitHub.
Dev tools · 27d ago · github.com
OpenBot▲362Grok Bot alternative: free, local, open-source, multiplayer
Dev tools · 24d ago · openbot.run
Talanoa▲346Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…
Dev tools · 22d ago · talanoa.email
Source: Show HN post ↗ · launch text quoted in part
Launched alongside, September 2025
the whole month →
The site hit #1 on HN about a year ago. Got enough traffic that I turned it into a proper API. What's there: - REST API — 35k products, manually filterable by category, free key, 60 req/min - CLI — npx anycrap random -c food - faker.js plugin — bundled, no API call, works offline - HuggingFace dataset — full 35k rows for ML/training https://anycrap.shop/developers
AI · 2025 · anycrap.shop
I made a built-from scratch Wayland Compositor to display any GUI app* in the terminal! I think there is a lot of unexplored potential in custom Wayland compositors, a lot of really cool things you can embed existing applications into! So, I started with embedding apps into the terminal because that is the easiest input/output (output is just utf-8 and I use the great `chafa` library for that, and I just read from stdin for the input). If you have any other ideas for cool Wayland compositors, let me know. I purposedly wrote 80% the app in Typescript to appeal to the most developers and…
Dev tools · 2025 · github.com
- IR
Years ago I stumbled across a basic version of this concept and it stuck with me. I knew if I was ever going to take on such a project, it would need to be flawless, but without coding experience it was just another idea that would never happen. By the end of 2024, as AI coding tools exploded everywhere, I finally had a way to make it real. I started from zero knowledge and spent months collaborating with AI agents as a learning experience. Every pixel and every function went through me. The AI translated what I asked for into code, but every decision was human. I didn't use existing OS…
AI · 2025 · mitchivin.com
