TinyNPM buffers npm updates to thwart supply‑chain attacks
TinyNPM is a VS Code extension that hides the newest package versions for a configurable number of days, showing only releases that have aged enough to be considered safe. By delaying updates, it reduces the risk of automatically pulling a compromised version, while also surfacing dependency health info directly in package.json.