News for hackers. Stuff that matters.
Re:What NPM should do to stop a new colors attack by johannes1234321 on Tuesday January 11, 2022 @09:12AM (#29891622)
many java jars contain other jars withbthe dependency, so users don't have to run maven or something like thst, but jsut grab the jar. This is even worse. (there was no package manager early on, thus many java developers aren't taught that way, even decades after Maven was created ... and for end-user products it makes sense to bundle)

There are no comments on this comment yet.