News for hackers. Stuff that matters.

A comment on Malicious code in the purescript NPM installer. Parent comment

Re:Malicious code in the purescript NPM installer by spenczar5 on Sunday July 28, 2019 @10:09PM (#20550992)
> The gains are small but quickly add up.

There are costs to these micro-libraries that outweigh the gains. This code is trivial; there aren’t really edge cases to be worked out.

[ Parent | on HN ]
Re:Malicious code in the purescript NPM installer by jasonhansel on Sunday July 28, 2019 @10:19PM (#20551029)
Also: the way the library handles those edge cases isn't necessarily the way you want. Case in point: rate-map throws exceptions in situations where you might expect it to fail more gracefully.
[ Parent | on HN ]