News for hackers. Stuff that matters.

A comment on What NPM should do to stop a new colors attack. Parent comment

Re:What NPM should do to stop a new colors attack by anhner on Tuesday January 11, 2022 @07:08AM (#29890541)
> Why are they drinking from someone else's well?

Because the well said "free water". And in some cases it's not even them taking water from that well, but other people who they asked to bring them tea (third party libraries).

> Someone with "a sizeable past history of jerkdom"?

Do you really dig through the internet history of every maintainer of every package you ever used?

[ Parent | on HN ]
Re:What NPM should do to stop a new colors attack by brigandish on Tuesday January 11, 2022 @08:41AM (#29891318)
> Do you really dig through the internet history of every maintainer of every package you ever used?

No, because that would be impossible but I do try to check the libraries I use to the best of my ability, the same with browser extensions I install. I even read the ingredients on things I buy. Sometimes I read the instructions on drugs I'm prescribed.

The perfect is the enemy of the good, after all.

[ Parent | on HN ]
Re:What NPM should do to stop a new colors attack by krab on Tuesday January 11, 2022 @08:19AM (#29891121)
In fact, it said "free water without implied fitness for a particular purpose".
[ Parent | on HN ]