News for hackers. Stuff that matters.
Re:Malicious code in the purescript NPM installer by fock on Monday July 29, 2019 @04:37AM (#20552606)
and if you look closely, 70 of those dependents are just small-scale/bs packages and the only sensible real dependency is cross-spawn _via_ the shebang package (which applies this regex to a string). The whole ecosysten could use a purge of all those useless 1-line-requires (which were all introduced by helpful commits from the "i has 1337 downloads"-community), currently this is madness.

There are no comments on this comment yet.