package.json
AssessLanguages & Frameworks
The standard manifest file for JavaScript projects that declares dependencies and project metadata.
Why it's here
Placed in Assess: 2 article(s) of evidence from 1 source(s), led by product launches, with 2 in the last 30 days. Confidence 31%.
Evidence (2)
- 6Hacker News·8/6/2026researchUsers miss many threats when approving AI agent commands
A browser game based on approving or denying AI coding agent commands collected data from more than 40,000 runs and 409,000 decisions. The results show players missed about one-third of threats on average, with familiar-looking commands such as npm run analyze often approved despite hidden malicious behavior in project scripts.
- 7Hacker News·7/30/2026product_launchCodePen launches CodePen 2.0
CodePen has launched CodePen 2.0, describing it as a major rebuild with more work than the original product. The post highlights new workflows such as file-based JavaScript in Pens, npm package support via package.json, live collaboration, invites for co-editing, and adding MJML as a new block type. Early launch use cases included collaborative demos and building and deploying small sites directly from the editor.