News for hackers. Stuff that matters.

A comment on What NPM should do to stop a new colors attack. Parent comment

Re:What NPM should do to stop a new colors attack by wruza on Monday January 10, 2022 @06:14PM (#29884428)
Pretty sure they don't MRI every other batch of rust covered by paint received from yet another shitty frame manufacturer. Many PSU, GPU, etc manufacturers often ship first batch with hi-class components, and then "downgrade it a little" or "lose control of a dealer" when it sells nice.
[ Parent | on HN ]
Re:What NPM should do to stop a new colors attack by bogeholm on Monday January 10, 2022 @06:20PM (#29884489)
There we go again, someone always has to mention “rust” in every thread about programming languages or dependency management…

;)

[ Parent | on HN ]
Re:What NPM should do to stop a new colors attack by foobiekr on Tuesday January 11, 2022 @12:28AM (#29887940)
Spot checks and manufacturing line quality monitoring absolutely do happen in the process you are describing, which is a hell of a lot more than the weak excuses for not even bothering to mirror the SW and look at diffs now and then accomplish.
[ Parent | on HN ]