News for hackers. Stuff that matters.

A comment on Empty NPM package '-' has over 700k downloads.

Re:Empty NPM package '-' has over 700k downloads by marto1 on Tuesday August 03, 2021 @01:52AM (#28046070)
Where there's user input there's cybersquatting.
[ Parent | on HN ]
Re:Empty NPM package '-' has over 700k downloads by captn3m0 on Tuesday August 03, 2021 @03:33AM (#28046582)
Having a global namespace for packages was a bad idea. (same with ruby and python).

PHP gets it right: https://packagist.org/explore/

[ Parent | on HN ]