Re:Malicious code in the purescript NPM installer
by fock on Monday July 29, 2019 @04:37AM
(#20552606)
and if you look closely, 70 of those dependents are just small-scale/bs packages and the only sensible real dependency is cross-spawn _via_ the shebang package (which applies this regex to a string). The whole ecosysten could use a purge of all those useless 1-line-requires (which were all introduced by helpful commits from the "i has 1337 downloads"-community), currently this is madness.
[ Parent
| on HN ]
There are no comments on this comment yet.