News for hackers. Stuff that matters.

A comment on What NPM should do to stop a new colors attack. Parent comment

Re:What NPM should do to stop a new colors attack by heavyset_go on Monday January 10, 2022 @09:08PM (#29886329)
> No one expects a maintainer to purposely break their project.

If you're using a 3rd party dependency, especially one you aren't paying for, you should expect it to break or disappear at any time.

[ Parent | on HN ]
Re:What NPM should do to stop a new colors attack by chaostheory on Monday January 10, 2022 @09:13PM (#29886369)
Falling into disrepair, or not being maintained due to various valid reasons: yes. This happens all the time.

Some asshole maliciously breaking your stuff: no.

I do not use either colorsjs or fakerjs. I was close since I used the Ruby version of faker that Marak ported into nodejs as fakerjs.

[ Parent | on HN ]