# hitting (blogs) — RSS Amplifier Recent posts from the 1 feeds in the RSS Amplifier directory that cover hitting. Page: Feed: --- ## [Hardening Yarn Against Supply Chain Attacks](https://tim.alby.fr/posts/hardening-yarn-supply-chain/) _2026-05-27 · timothee@alby.fr (Tim Alby) · Tim Alby_ A few lines in .yarnrc.yml and a small package.json allowlist that buy you real protection against the kind of supply chain attacks that have been hitting the JS ecosystem lately. ## [Hardening npm Against Supply Chain Attacks](https://tim.alby.fr/posts/hardening-npm-supply-chain/) _2026-05-26 · timothee@alby.fr (Tim Alby) · Tim Alby_ A few small changes to .npmrc, a shell wrapper and a couple of dev dependencies that buy you real protection against the kind of supply chain attacks that have been hitting npm lately.