View a markdown version of this page

Security best practices - Amazon Linux 2023

Security best practices

When using Node.js and npm on AL2023, follow the upstream Node.js security best practices guide. It covers application-level threats including supply chain attacks, and mitigations such as using lockfiles and disabling lifecycle scripts.