News for hackers. Stuff that matters.

A comment on Devs unknowingly use “malicious” modules snuck into official Python repository. Parent comment

Re:Devs unknowingly use “malicious” modules snuck into offic... by PeterisP on Monday September 18, 2017 @06:52AM (#15274761)
Server side Javascript (which has the abovementioned dependency problems) can be boycotted just as easily as any other language, the JS monopoly effect applies only to the front end.
[ Parent | on HN ]
Re:Devs unknowingly use “malicious” modules snuck into offic... by scaryclam on Monday September 18, 2017 @06:59AM (#15274787)
It's also worth noting that it's pretty easy to do JavaScript development and just not use NPM, so no-one needs to boycott JavaScript, just that particular installation approach.
[ Parent | on HN ]
Re:Devs unknowingly use “malicious” modules snuck into offic... by watwut on Monday September 18, 2017 @10:13AM (#15276097)
Sure, and I actually like java, but you know, blanket "don't use javascript" because it happens to have package manager is dumb. I mean, java has maven. It just so happen to be that package managers are useful things and helps to avoid massive mess in anything larger then hello world. Especially if we are speaking about open source projects.
[ Parent | on HN ]