06/08/2026
Node.js Security on IBM i: Don’t Twist Your Melon (But Do Pay Attention)
A subscriber left a great comment on one of my recent vlogs. They’re worried that all this Node.js stuff IBM is encouraging means we’re opening up security holes. npm had that supply chain mess with Red Hat back in 2024, and now hundreds of packages with their own dependencies are sitting on our systems. Is IBM i suddenly less secure? Are we giving attackers a bigger target in what used to be a pretty locked-down world?...
A subscriber left a great comment on one of my recent vlogs. They’re worried that all this Node.js stuff IBM is encouraging means we’re opening up security holes. npm had that supply chain mess wit…