News for hackers. Stuff that matters.

A comment on Malicious code in the purescript NPM installer. Parent comment

Re:Malicious code in the purescript NPM installer by fock on Monday July 29, 2019 @03:56AM (#20552392)
Tell me, why one needs packages such as this except for personal (and ultimately npm) marketing: https://github.com/sindresorhus/shebang-regex - the whole thing smells
[ Parent | on HN ]
Re:Malicious code in the purescript NPM installer by inimino on Monday July 29, 2019 @06:09AM (#20553023)
You're being downvoted because that is mean-spirited, but the reason we needed these packages is to find out what the right size of package is. We now have a lower bound.
[ Parent | on HN ]
Re:Malicious code in the purescript NPM installer by fock on Monday July 29, 2019 @07:44AM (#20553474)
I'm not sure what's mean-spirited about the simple statement that the size/complexity of the npm-eco-system arises only from personal/corporate business-decisions.

But thanks for telling me anyways ;)

[ Parent | on HN ]
Re:Malicious code in the purescript NPM installer by inimino on Monday July 29, 2019 @02:48PM (#20557961)
Business decisions and marketing are not the only reasons people write open source software and you would do well to remember it.
[ Parent | on HN ]