News for hackers. Stuff that matters.

A comment on Malicious code in the purescript NPM installer. Parent comment

Re:Malicious code in the purescript NPM installer by hnbroseph on Sunday July 28, 2019 @09:30PM (#20550843)
> I trust these people

why?

[ Parent | on HN ]
Re:Malicious code in the purescript NPM installer by varjag on Monday July 29, 2019 @02:43AM (#20552024)
There is a process for recruiting Debian devs where trustworthiness is a consideration.

https://wiki.debian.org/DebianDeveloper#Advocating_a_Debian_...

There is none for npm.

[ Parent | on HN ]
Re:Malicious code in the purescript NPM installer by scbrg on Monday July 29, 2019 @02:24AM (#20551942)
Can't speak for parent, but because they have historically shown themselves to be trustworthy.

I don't know much about the "NPM community," but judging from the bits I do hear, I'm not sure they have done the same. OTOH, I understand that as an outsider that only pay attention when shit blows up, I'm only seeing the bad parts.

[ Parent | on HN ]