Re:Malicious code in the purescript NPM installer
by arkh on Monday July 29, 2019 @09:08AM
(#20554199)
I love the useless tests : https://github.com/sindresorhus/shebang-regex/blob/1cb5d4aee...
You could replace the regexp with something matching everything and they would still pass.
Re:Malicious code in the purescript NPM installer
by fock on Monday July 29, 2019 @04:37AM
(#20552606)
and if you look closely, 70 of those dependents are just small-scale/bs packages and the only sensible real dependency is cross-spawn _via_ the shebang package (which applies this regex to a string). The whole ecosysten could use a purge of all those useless 1-line-requires (which were all introduced by helpful commits from the "i has 1337 downloads"-community), currently this is madness.
Re:Malicious code in the purescript NPM installer
by tuananh on Monday July 29, 2019 @05:33AM
(#20552856)
sindresorhus is famous for that stuff :D
Re:Malicious code in the purescript NPM installer
by vhakulinen on Monday July 29, 2019 @06:16AM
(#20553051)
This just made my day.
With 8.6 mil downloads and 71 dependents...
https://www.npmjs.com/package/shebang-regex