News for hackers. Stuff that matters.

A comment on What NPM should do to stop a new colors attack. Parent comment

Re:What NPM should do to stop a new colors attack by notatoad on Monday January 10, 2022 @04:21PM (#29882734)
Sure, that is technically correct and if your only goal is to assign blame that's helpful to point out. But it does nothing to prevent this from happening again.

The point here is how we can make it easier for svgo and every other package to avoid the problem in the first place.

[ Parent | on HN ]
Re:What NPM should do to stop a new colors attack by bhedgeoser on Monday January 10, 2022 @04:23PM (#29882767)
* It should be the responsibility of "svgo" to make sure it's direct dependencies are alright.
[ Parent | on HN ]
Re:What NPM should do to stop a new colors attack by gopher_space on Monday January 10, 2022 @04:33PM (#29882935)
Why can't you point that attitude in both directions?
[ Parent | on HN ]