News for hackers. Stuff that matters.
Re:The rise of few-maintainer projects by josteink on Sunday May 26, 2019 @04:19AM (#20013770)
> you've basically said no developers should ever trust npm

Nobody should. At least not blindly. You should check what updates are and who made them. On every update.

Anything else is irresponsible and your own god damn fault when things go wrong.

> That is not how open source works.

npm is a proprietary package-repo and has nothing to do with how open source works. You can also easily publish proprietary packages using npm.

Re:The rise of few-maintainer projects by pdonis on Sunday May 26, 2019 @02:00PM (#20016357)
> Nobody should.

Ok, thanks for putting everyone on notice.

> npm is a proprietary package-repo and has nothing to do with how open source works.

So event-stream is not open source?