Facebook today is open-sourcing Yarn, a package manager for efficiently installing JavaScript packages that represent dependencies for applications. Yarn is available now on GitHub under a BSD-2 ...

A package manager is an enabler created with open-source code that helps install or update these packages. NPM is a default package manager for the widely used JavaScript runtime environment Node.js.

Socket, a security firm, has created a new method for protecting developers from the flaws in npm, GitHub’s JavaScript package manager.