News for hackers. Stuff that matters.

A comment on Empty NPM package '-' has over 700k downloads. Parent comment

Re:Empty NPM package '-' has over 700k downloads by behindsight on Tuesday August 03, 2021 @12:51AM (#28045814)
I agree with the general sentiment, but if you do want to unpublish there is a policy available [0]

Key points being either:

- published within 72 hours and without any dependents

- no dependents, < 300/week downloads, single owner

Of course even with all that said there was also precedent for having it removed if you emailed them directly and it was up to their discretion (I believe this was prior to their acquisition so not sure if that still applies).

0: https://docs.npmjs.com/policies/unpublish

[ Parent | on HN ]
Re:Empty NPM package '-' has over 700k downloads by brundolf on Tuesday August 03, 2021 @01:15AM (#28045908)
Technically. But the above is specifically designed to prevent someone from unpublishing a package that could "break half the internet", which is what the original poster was waxing on about.
[ Parent | on HN ]
Re:Empty NPM package '-' has over 700k downloads by galoisgirl on Tuesday August 03, 2021 @10:05AM (#28049321)
Well, - has 56 dependents, so that ship has sailed.
[ Parent | on HN ]