Re:Malicious code in the purescript NPM installer
by littlestymaar on Monday July 29, 2019 @07:19AM
(#20553337)
That's the mechanism, I was asking about the benefit of namespace in that case. With this kind of ownership transfers you lose all the alleged security benefit of namespaces.
[ Parent
| on HN ]
Re:Malicious code in the purescript NPM installer
by davnicwil on Monday July 29, 2019 @08:40AM
(#20553934)
I think we're asking the same thing, or I've not explained well. I'm saying when ownership transfers, it'd be good to keep all the existing version history on the original namespace, exactly so you're not forced to update all your dependencies in case you don't need to upgrade and/or don't want the updates of the new owner.