News for hackers. Stuff that matters.

A comment on Malicious code in the purescript NPM installer. Parent comment

Re:Malicious code in the purescript NPM installer by trabant00 on Monday July 29, 2019 @02:24AM (#20551943)
> Packages being months behind the latest version is a feature, not a bug

I struggle to convince devs and management about this in the past few years. Everyone's gone crazy about latest and greatest set of features with no respect for stability, maintainability, etc.

[ Parent | on HN ]
Re:Malicious code in the purescript NPM installer by tudelo on Monday July 29, 2019 @10:22AM (#20554877)
To be fair upgrading very old libraries because you hit a fixed bug to very new libraries can be a long process... but I never have worked on a project that stayed on new libraries continuously so... not sure how it works the other way.
[ Parent | on HN ]