Re:I've Just Liberated My Modules
by andrewfong on Tuesday March 22, 2016 @08:59PM
(#11341297)
GPG isn't strictly necessary if you trust NPM's authentication system (of course, that's a big "if" for many folks).
Publish forever (barring requests to remove for legal compliance or whatever) is a good idea. Or at the very least, it should be a default option. And if you install a dependency that isn't "publish forever", you should get a warning.
Publish forever (barring requests to remove for legal compliance or whatever) is a good idea. Or at the very least, it should be a default option. And if you install a dependency that isn't "publish forever", you should get a warning.