News for hackers. Stuff that matters.
Re:Malicious code in the purescript NPM installer by justinclift on Monday July 29, 2019 @01:10AM (#20551672)
> People care about having more packages much more than abstract fears of security or quality of those packages.

You're partially right. Some people haven't yet learned (eg the hard way, or whatever) that quality does matter.

Hopefully most of those people will learn to appreciate and demand quality over time, instead of the current anything-goes-approach.

In the meantime, things like this npm package example will continue to give npm/javascript black eyes (repeatedly) and help make that happen. :)

There are no comments on this comment yet.