Every Node.js project accumulates vulnerable dependencies. The npm registry holds over 2.5 million packages, and researchers found 454,000 malicious or vulnerable packages uploaded in 2025 alone.
Speakers at SX2026 say human skills will matter more, not less, as AI takes over routine work Will AI replace people? Which ...