News for hackers. Stuff that matters.

A comment on How to build an NPM worm.

Re:How to build an NPM worm by nostalgeek on Friday July 13, 2018 @02:54AM (#17520994)
> It bothers me greatly that npm is a private company. It bothers me that npm is closed-source (the registry and server). It bothers me because I can't contribute. I can only inform the community of the problems.

NPM the repository is not open source? How does a non open source platform ended up being the default package repository for an open source project is a complete mystery (since NPM client IS bundled with node distribution). People should be allowed to run their own NPM mirror ... for without having to pay for a license. I don't have to pay for packagist or pip server, I can only if I want professional support, so what is this?

[ Parent | on HN ]
Re:How to build an NPM worm by tatersolid on Friday July 13, 2018 @07:09AM (#17521913)
Umm... do you use Github? Docker? Wordpress?
[ Parent | on HN ]
Re:How to build an NPM worm by nostalgeek on Friday July 13, 2018 @08:37AM (#17522381)
Now please explain me what it has to do with anything I say, since I do not use any of these services.
[ Parent | on HN ]
Re:How to build an NPM worm by tatersolid on Friday July 13, 2018 @11:10PM (#17528587)
They are all very popular “open source” ecosystem tools beholden to a for-profit corporation.

Somebody has to pay the bills.

[ Parent | on HN ]
Re:How to build an NPM worm by nostalgeek on Friday July 13, 2018 @11:28PM (#17528649)
> They are all very popular “open source” ecosystem tools beholden to a for-profit corporation.

NPM server is not open source to begin with. Its client shouldn't be bundled with node, an open source project. I don't use Wordpress but pretty sure I don't have to pay a license to Wordpress to install its CMS on a server. And github server IS NOT open source.

[ Parent | on HN ]