News for hackers. Stuff that matters.

A comment on Dev corrupts NPM libs 'colors' and 'faker', breaking thousands of apps. Parent comment

Re:Dev corrupts NPM libs 'colors' and 'faker', breaking thou... by pvorb on Monday January 10, 2022 @05:44PM (#29883979)
Do you have advice for projects that use Maven? I know every package on Maven Central has a PGP signature, but as far as I know, Maven doesn't verify them.
[ Parent | on HN ]

There are no comments on this comment yet.