News for hackers. Stuff that matters.

A comment on Malicious crossenv package on npm. Parent comment

Re:Malicious crossenv package on npm by ris on Wednesday August 02, 2017 @04:22AM (#14908831)
It wouldn't. Nothing will help with package managers that follow the "wild west" or "any old crap" model where there is no maintainer or distributor between the developer and consumer that is allowed to perform any sort of quality control or sanitisation. This is what makes me hugely favour the "maintained" model followed by distributions or nix/guix.

The wild west model scares the bejesus out of me to be honest.

[ Parent | on HN ]
Re:Malicious crossenv package on npm by krapp on Wednesday August 02, 2017 @09:03PM (#14916138)
The "wild west" model doesn't disallow anyone from providing quality control, it just doesn't enforce one particular person or entity's idea of what quality control should be.
[ Parent | on HN ]
Re:Malicious crossenv package on npm by ris on Friday August 04, 2017 @02:00PM (#14930572)
I think we disagree with definitions of "quality control". My definition goes hand in hand with consistency.
[ Parent | on HN ]