News for hackers. Stuff that matters.

A comment on NPM package 'isarray' is downloaded 40M times a week.

Re:NPM package 'isarray' is downloaded 40M times a week by whollacsek on Sunday November 08, 2020 @10:29AM (#25026316)
For the betterment of the npm ecosystem the company should step in and depreciate all these simple packages. Or take over the responsibility over them for security reasons.
[ Parent | on HN ]
Re:NPM package 'isarray' is downloaded 40M times a week by wongarsu on Sunday November 08, 2020 @10:47AM (#25026457)
Which company? Npm Inc? Github? Microsoft? Google? Mozilla?

Each of those would cause an outroar, and it would be near-universally agreed that having a decentralized ecosystem is better than being beholden to the whims of $company. (it doesn't help that 3/5 of the companies I mentioned are Microsoft, famous for embrace-extend-extuinish)

[ Parent | on HN ]
Re:NPM package 'isarray' is downloaded 40M times a week by KaiserPro on Sunday November 08, 2020 @10:33AM (#25026344)
The problem is that there no real stdlib. Sure someone _could_ make a stdlib in npm, but it'd change everyweek.
[ Parent | on HN ]
Re:NPM package 'isarray' is downloaded 40M times a week by andrew_ on Sunday November 08, 2020 @10:42AM (#25026422)
A stdlib wouldn't solve the problem for older environments because a stdlib would almost certainly be tied to engine versions.
[ Parent | on HN ]