
  <rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
    <channel>
      <title>Nadim Tuhin</title>
      <link>https://www.nadimtuhin.com/blog</link>
      <description>Staff engineer and tech lead with 10+ years shipping production systems. Open to remote Staff and Tech Lead roles.</description>
      <language>en-us</language>
      <managingEditor>nadimtuhin@gmail.com (Nadim Tuhin)</managingEditor>
      <webMaster>nadimtuhin@gmail.com (Nadim Tuhin)</webMaster>
      <lastBuildDate>Thu, 24 Sep 2026 00:00:00 GMT</lastBuildDate>
      <atom:link href="https://www.nadimtuhin.com/tags/supply-chain/feed.xml" rel="self" type="application/rss+xml"/>
      
  <item>
    <guid>https://www.nadimtuhin.com/blog/pmharden-case-study</guid>
    <title>pmharden: auditing npm, pnpm and yarn config for secrets</title>
    <link>https://www.nadimtuhin.com/blog/pmharden-case-study</link>
    <description>pmharden audits package manager config, scans for plaintext tokens and flags risky global packages in one command. A walkthrough of the code, the 45 tests and the rough edges I still see.</description>
    <pubDate>Thu, 24 Sep 2026 00:00:00 GMT</pubDate>
    <author>nadimtuhin@gmail.com (Nadim Tuhin)</author>
    <category>typescript</category><category>npm</category><category>security</category><category>supply-chain</category><category>cli</category><category>open-source</category>
  </item>

    </channel>
  </rss>
