News for hackers. Stuff that matters.
Re:What NPM should do to stop a new colors attack by BoorishBears on Monday January 10, 2022 @07:42PM (#29885446)
You don't get to have it both ways:

If you go by the spirit of things tanking a package and Github/MS/npm taking over to undo that is fair game. Even if it's not literally a virus, obviously damaging basic functionality to make a statement is not a sustainable practice for NPM to continue functioning

If you want to go by the letter and what legal rights someone has:

https://docs.npmjs.com/policies/conduct

> The Service administrators reserve the right to make judgment calls about what is and isn't appropriate in published packages, package names, user and organization names, and other public content. Package that violates the npm Service's Acceptable Use rules including its Acceptable Content rules will be deleted, at the discretion of npm.

https://docs.npmjs.com/policies/open-source-terms

> Your Content belongs to you. You decide whether and how to license it. But at a minimum, you license npm to provide Your Content to users of npm Services when you share Your Content. That special license allows npm to copy, publish, and analyze Your Content, and to share its analyses with others. npm may run computer code in Your Content to analyze it, but npm's special license alone does not give npm the right to run code for its functionality in npm products or services.

> When Your Content is removed from npm Services, whether by you or npm, npm's special license ends when the last copy disappears from npm's backups, caches, and other systems. *Other licenses, such as open source licenses, may continue after Your Content is removed. Those licenses may give others, or npm itself, the right to share Your Content with npm Services again.*

https://github.com/Marak/colors.js/blob/master/LICENSE

-

Seriously, why are people so adamant about defending this? We're all part of a giant ecosystem that relies on everyone being "a freeloading dick" in your eyes. Colors wouldn't have its audience without its creator being a "freeloading dick" and expecting NPM to serve it millions of times for free. NPM relies on a JS ecosystem propped up by "freeloading dicks".

"Freeloading dick" is such a dumb characterization of what it really is: Expecting FOSS creators and maintainers to be somewhat cognizant of the ecosystem past the tip of their nose.

Re:What NPM should do to stop a new colors attack by ozfive on Monday January 10, 2022 @08:04PM (#29885658)
If we are all a part of a giant ecosystem then it should be acknowledged that work has been done and should be compensated for otherwise you are just continuing to advocate for the exploitation of FOSS software without handing any compensation over for the value that it adds to this giant ecosyatem
Re:What NPM should do to stop a new colors attack by BoorishBears on Monday January 10, 2022 @10:12PM (#29886944)
Why are you replying to a statement I didn't make? Where am I saying people should not be compensated for FOSS work?

First you wrote a rant that promptly got flagged before I even had to read it... now you're putting words I didn't say into my mouth.

Are you just incapable of having a mature conversation about this subject?

-

It's becoming a little clearer what kind of mentality it takes to defend how the creator of colors handled this situation. Some of us are able to both:

- understand the frustration of feeling your work is unappreciated.

- realize there are better ways to show frustration than proverbially flipping over the table.

I mean I've literally defended this guy, Marak, before on this website, when people tried to jump to conclusions about his alleged 'bomb making'

But this is ridiculous. It's gone past compensation even, he's ranting about GamerGate and stuff and using broken packages to make political statements.

That's not a mature or effective way to do anything except yes... get yourself banned from multiple platforms for breaking the ToS you signed up for in the first place and leveraged to even get the kind of reach you have.

Re:What NPM should do to stop a new colors attack by lmm on Tuesday January 11, 2022 @12:57AM (#29888104)
"should be compensated for" - what a wonderfully passive-voiced phrase. If you don't want giant corporations using your open-source code, it's as simple as using the GPL. Of course, in that case your code probably won't get so popular in the first place.
Re:What NPM should do to stop a new colors attack by Macha on Tuesday January 11, 2022 @02:07PM (#29896177)
s/GPL/AGPL/

Plenty of SaaS providers end up using GPL code as if it was MIT since no distribution = no virality.

Re:What NPM should do to stop a new colors attack by ozfive on Monday January 10, 2022 @08:00PM (#29885620)
You are toxic and a perfect example of shilling for corporations. I bet you depend on that package and many others that you and your corporate overlords haven't paid a cent for. Deplorable at best. I donate to projects that I use as a percentage of revenue. Name more than one OSS project that your company has actually donated money to on a regular basis to ensure that it's original maintainer has some sort of compensation for the work they put in based on your usage? I bet you can't because you are more than happy to exploit things that you consider free. Defending freeloading dicks just puts you in that category.
Re:What NPM should do to stop a new colors attack by dang on Wednesday January 12, 2022 @12:35AM (#29902729)
Personal attacks like this and https://news.ycombinator.com/item?id=29885496 and https://news.ycombinator.com/item?id=29753758 are against the site rules and extremely not ok here. We ban accounts that post like that. I'm not going to ban you right now, since we haven't warned you before, but please don't do this again.

If you wouldn't mind reviewing https://news.ycombinator.com/newsguidelines.html and taking the intended spirit of the site more to heart, we'd be grateful.

Re:What NPM should do to stop a new colors attack by ozfive on Wednesday January 12, 2022 @08:15PM (#29915494)
Fair enough dang. Will do...
Re:What NPM should do to stop a new colors attack by ozfive on Wednesday January 12, 2022 @08:15PM (#29915505)
Sorry