Package-based Monorepos - Speed Up in Under 7 Minutes

Juri Strumpflohner

Yarn: From Design to Implementation

Maël Nison

Security Controls in the JavaScript Supply Chain

Liran Tal

What's New in npm?

Darcy Clarke

Levelling up Monorepos with npm Workspaces

Ruy Adorno

Package Management in Monorepos

Zoltan Kochan

The Secret Life of Package Managers

Tally Barak

Publishing TS Libraries for Fun and Profit

Mark Erikson

Build Web3 apps with React 

Shain Dholakiya

Finding, Hacking and fixing your NodeJS Vulnerabilities with Snyk

Matthew Salmon

DevOps.js

DevOps.js Conf 2022

Learn more about how to leverage the default features of npm workspaces to help you manage your monorepo project while also checking out some of the new npm cli features. <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

DevOps.js Conf 2024

In this talk, we'll go over the various iterations the Yarn team went through designing one of the most critical software in the JavaScript ecosystem. We'll discuss some of the main choices, trade-offs, errors, and successes we faced, and think about evolutions to come and future challenges that await us. By the end of this talk you'll have a better understanding of the work large-scale open-source teams do behind the team, and hopefully a better understanding of what makes open-source so special.

We’ll talk about some of the pain points and look into recipes for effective package management in monorepos.  We’ll discuss how package management works with npm, pnpm, and Yarn. Furthermore, I’ll show you a new tool that is less known but improves developer experience by a lot.

TS Congress

TypeScript Congress 2023

Publishing libraries to NPM is easy - just `tsc &amp;&amp; npm publish` and you're done, right? Whoops, you forgot proper ESM compat. And a user is asking for a UMD build. And it doesn't work in Webpack 4. And `moduleResolution: "node16"` can't find the types. Publishing libraries today is _complicated_. We'll take a look at the many problems and questions you should consider when publishing a package, and some hard-earned possible answers to those questions.type

JS Nation

JSNation 2023

They gave me just 7 minutes! So this is a no-slides, just code talk! I'm gonna show you a Yarn/NPM/PNPM workspaces-based monorepo implementation and how we can speed it up. In particular, I'm using Nx on top to get better parallelization, the ability to define task pipelines, caching, and more. Curious? Join me!

JSNation 2022

The omnipresence of open-source software and low-barrier of entry on npmjs are serving as a catalyst for supply chain security incidents that are continuously impacting JavaScript developers. What can we do to protect ourselves?

Node Congress

Node Congress 2022

Ever wondered what happens after you hit npm install and go to grab a coffee? Let's deep dive into Npm and Yarn installation process, and how you can put this knowledge into practice. <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

DevOps.js Conf 2021

The npm CLI has been, &amp; continues to be, a core developer tool of the Node.js/JavaScript ecosystem. This past year npm@7 became Generally Availble, introducing with it a wealth of changes &amp; net-new capabilities including: lockfile upgrades, workspace support, installing peer dependencies default, npm diff, npm explain, npm exec, npm set-script &amp; much, much more. We'll dive into this work as well as share some exciting news about what to expect in the weeks &amp; months to come. <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

npm and security, how much do you know about your dependencies?Hack-along, live hacking of a vulnerable Node app https://github.com/snyk-labs/nodejs-goof, Vulnerabilities from both Open source and written code. Encouraged to download the application and hack along with us.Fixing the issues and an introduction to Snyk with a demo.Open questions.

React Summit

React Summit 2022

The workshop is designed to help Web2 developers start building for Web3 using the Hyperverse. The Hyperverse is an open marketplace of community-built, audited, easy to discover smart modules. Our goal - to make it easy for React developers to build Web3 apps without writing a single line of smart contract code. Think “npm for smart contracts.” Learn more about the Hyperverse <a href="https://www.decentology.com/hyperverse">here</a>. We will go over all the blockchain/crypto basics you need to know to start building on the Hyperverse, so you do not need to have any previous knowledge about the Web3 space. You just need to have React experience.

#npm