Re:Devs unknowingly use “malicious” modules snuck into offic...
by omginternets on Monday September 18, 2017 @08:07AM
(#15275108)
>You specifically chose a large dependency with many sub-dependencies, so yes, that will happen.
You're too kind.
JavaScript is outright unusable without pulling in hundreds of dependencies. NPM's ecosystem is 80% band-aids over terrible language design, which in turn leads to things like this: https://github.com/stevemao/left-pad/issues/4
You're too kind.
JavaScript is outright unusable without pulling in hundreds of dependencies. NPM's ecosystem is 80% band-aids over terrible language design, which in turn leads to things like this: https://github.com/stevemao/left-pad/issues/4
NPM is the symptom. JS is the problem.