NPM Apocalypse 2025: How to sleep when the ecosystem is collapsing
Year 2025 was brutal for NPM package security. Hundreds of compromised libraries, millions of malware downloads. How do you defend yourself? You will not manage it by hand. Here is my strategy with Renovate bot.