News for hackers. Stuff that matters.

A comment on Malicious code in the purescript NPM installer. Parent comment

Re:Malicious code in the purescript NPM installer by pjmlp on Monday July 29, 2019 @02:33AM (#20551980)
For starters, developers in other language communities don't publish packages for single line functions.
[ Parent | on HN ]
Re:Malicious code in the purescript NPM installer by SahAssar on Monday July 29, 2019 @03:45AM (#20552327)
That's a philosophical difference which says nothing of their understanding of the rest of the software universe.

I dislike the microdependencies and the "DRY-taken-to-the-extreme" stuff that the js community does but your argument does not hold up.

[ Parent | on HN ]
Re:Malicious code in the purescript NPM installer by Corrado on Monday July 29, 2019 @04:11AM (#20552484)
I beg to differ; witness the fibur[0] Ruby Gem. Written by Arron Patterson (@tenderlove) to show that using threads in Ruby is very easy. The Gem consists of this single line:

   Fibur = Thread
Of course, he did it as a joke, and it doesn't excuse the serious packages that NPM contains, but it does prove that other languages have single line packages.

[0] https://rubygems.org/gems/fibur

[ Parent | on HN ]