News for hackers. Stuff that matters.
Re:What NPM should do to stop a new colors attack by dathinab on Monday January 10, 2022 @09:48PM (#29886730)
Then it would be a crime in more or less any country.

Now the question is if it's hanging intentionally?(Software as-is) license only helps so much. Think the answer for this is not clear cut.

Without question a line was crossed.

I mean sure there are endless problems about how npm handles things, but it's more nounced.

Like e.g. you needing to go out of your way to lock dependencies instead of it being some form of defaultish behaviour is a problem.

People distributing CLI tools without having strict dependency locking is a even bigger problem/no-go.

And this showing how careless some people are when it comes to distributing software is probably the most interesting thing.

There are no comments on this comment yet.