TAG

#npm

6articles

Dependabot Cooldown and GitHub Actions SHA Pinning — Supply Chain Defense for a Personal Blog

A Dependabot alert was the trigger to revisit the repository's automation: not just patching known CVEs, but also defending against maintainer-takeover supply chain attacks. This post bundles cooldown, Actions SHA pinning, npm overrides, ignore-scripts, and security-only auto-merge into one walkthrough.

securitysupply-chaindependabotgithub-actions

🐥Building an MCP Server for Searching the Koui Genji Monogatari Text DB

Building an MCP Server for Searching the Koui Genji Monogatari Text DB

npmswaggeropenapimcp

📘Creating Annotated IIIF Manifest Files and TEI/XML Files Using NDL Klasseki OCR-Lite

Creating annotated IIIF manifest files and TEI/XML files using NDL Klasseki OCR-Lite

npmmonorepoiiiftei

🐈Addressing a Bug in setFilter of @elastic/search-ui

Addressing a Bug in setFilter of @elastic/search-ui

😊Created a Custom OpenSeaDragon Viewer for Use in TEI Viewers

Created a Custom OpenSeaDragon Viewer for Use in TEI Viewers

🌟Prototype npm Package for Displaying Popups on Selected Text

Prototype npm Package for Displaying Popups on Selected Text