Every Node.js project accumulates vulnerable dependencies. The npm registry holds over 2.5 million packages, and researchers found 454,000 malicious or vulnerable packages uploaded in 2025 alone.
The second CFP rankings are out and Greg McElroy is here to give you his full reaction to the “overcorrection” by the committee. Indiana dropped to #9 after a bye week, the Big 12 got a lot of love ...