News for hackers. Stuff that matters.

A comment on What NPM should do to stop a new colors attack. Parent comment

Re:What NPM should do to stop a new colors attack by keneda7 on Monday January 10, 2022 @07:05PM (#29885051)
So do you disagree with the idea that it is his library?

If you agree that this is his library, do you believe what he did is different than a company changing their public API or deprecating them without any notice?

[ Parent | on HN ]
Re:What NPM should do to stop a new colors attack by acdha on Monday January 10, 2022 @07:11PM (#29885118)
It’s deliberate sabotage and shipped as a routine update. If he’d walked away or made a breaking change in a major release, nobody would expect more.

Similarly, if it was a service everyone understands that those require money to operate but there’s no analogous reason to tell people to upgrade to deliberately broken code.

[ Parent | on HN ]