Launch Intel
A

A VS Code extension buffers NPM updates to avoid supply chain attacks

Hacker News

A VS Code extension buffers NPM updates to avoid supply chain attacks

I had been using package.json version keepers for quite some time but after the big supply chain attack i thought they would be the perfect place to add in some security. The idea is just to provide the latest package number x days old. This will help prevent most of the danger in supply in chain attacks. It will also remove the `^` if you have it so you can better control what version of a package your application is using. To be more security focused it gives general hints in the hover menu to help keep an eye on the packages you have installed. These hints include warnings for staleness, high dependency count, and number of downloads. Since all of this is something you can get through the npm api, I called it tinyNpm

Visit productView on Hacker NewsJul 30, 2026
Share card

Actual performance

1points
Did not reach leaderboard

Launch Intel predictions

Analyze your own launch →
Indie HackersFits the IH revenue-focused audience · Missing: supports, reddit linkedin, podcasting
77%77% predicted probability of success on Indie Hackers, based on ML models trained on real launch data.
best fitHighest predicted score across all platforms for this description.
TrustMRRLess likely to generate early MRR · Missing: mobile apps, ios, personal
39%39% predicted probability of success on TrustMRR, based on ML models trained on real launch data.
AppSumoMay struggle as an AppSumo deal · Missing: plus, platform, intuitive
39%39% predicted probability of success on AppSumo, based on ML models trained on real launch data.
Product HuntUnlikely to reach the leaderboard · Strong signals: tiny, using, code · Missing: mac, agents, macos
38%38% predicted probability of success on Product Hunt, based on ML models trained on real launch data.
Hacker NewsMay not resonate with HN audience · Strong signals: ide, io · Missing: https docs, excited, just released
34%34% predicted probability of success on Hacker News, based on ML models trained on real launch data.
nativeThis product was originally launched on this platform.
Acquire.comPre-revenue stage for this audience · Missing: arr, mrr, revenue
15%15% predicted probability of success on Acquire.com, based on ML models trained on real launch data.
BetaListMay not resonate with beta-testers · Missing: web3, chat, crypto
1%1% predicted probability of success on BetaList, based on ML models trained on real launch data.

Correct prediction on native model

Similar products

Ne
New NPM Supply chain Attack?40%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

New NPM Supply chain Attack?

Hacker News2
Ty
Typewriter, my first VS Code extension46%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Typewriter, my first VS Code extension

Hacker News3
Wh
What's That Slang – VS Code extension for expansion of slangs46%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

What's That Slang – VS Code extension for expansion of slangs

Hacker News1
Ma
Markwhen VS Code Extension46%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Markwhen VS Code Extension

Hacker News2
Mi
Mitigate against 0-day supply chain attacks with safe-NPM36%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Mitigate against 0-day supply chain attacks with safe-NPM

Hacker News5
Pa
PasteOverflow – VS Code extension for instant code pasting from SO53%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

PasteOverflow – VS Code extension for instant code pasting from SO

Hacker News1
Re
Related Files extension for VS Code51%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Related Files extension for VS Code

Hacker News1
VS
VS Code GoLang Productivity Extension58%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

VS Code GoLang Productivity Extension

Hacker News3
To
Tooltitude for Go – productivity extension for Golang for VS Code39%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Tooltitude for Go – productivity extension for Golang for VS Code

Hacker News1
We
Webhooks development relay with VS Code extension44%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Webhooks development relay with VS Code extension

Hacker News4
Browse all productsAnalyze your launch