Reading a Lockfile: Supply Chain in Practice
What package-lock.json actually records, what its integrity hashes do and do not prove, and where the real install-time risk sits.
nodejs
2 posts
The Event Loop You Think You Know
Microtasks, rendering opportunities and starvation — what the loop actually does between your callbacks, in the browser and in Node.