Dev corrupts NPM libs 'colors' and 'faker', breaking thousands of apps

Re:Dev corrupts NPM libs 'colors' and 'faker', breaking thou... by gitgrump on Monday January 10, 2022 @02:02PM (#29879873)

This wasn't AWS CDK, it was a package to fake data and a package with some ANSI escape sequence constants. The comparison doesn't make sense. The problem is that developers apparently can't even differentiate between when you should use a library and when you shouldn't; they just pull in the first result from an NPM search. You can probably trust AWS, which is good because CDK is complicated. You can't necessarily trust random NPM package authors, which is good because rewriting `colors` is not a Herculean task.

[ Parent | on HN ]

Re:Dev corrupts NPM libs 'colors' and 'faker', breaking thou... by notatoad on Monday January 10, 2022 @04:17PM (#29882669)

It wasn't a comparison.

As the article states, AWS CDK depends on colors, if I want to use AWS CDK, I have to use colors too. I don't get the choice to re-implement that myself unless I want to stop using the official CDK library

[ Parent | on HN ]

Re:Dev corrupts NPM libs 'colors' and 'faker', breaking thou... by commandlinefan on Monday January 10, 2022 @05:40PM (#29883923)

Well, my comment (in this case) was directed at the people at AWS who decided to use the "colors" package instead of just spending a half hour adding their own ANSI escape sequences.

[ Parent | on HN ]