News for hackers. Stuff that matters.

A comment on NPM package event-source-polyfill compromised by political activists. Parent comment

Re:NPM package event-source-polyfill compromised by politica... by JohnHaugeland on Saturday April 09, 2022 @11:23AM (#30968823)
It seems like you're attempting to suggest that third party javascript is on equal trust footing with major tools and things by international corporations
[ Parent | on HN ]
Re:NPM package event-source-polyfill compromised by politica... by jackconsidine on Sunday April 10, 2022 @04:45PM (#30981529)
My point was that it's unreasonable to expect the exhaustive audit of all node modules. That said, "major tools and things by international corporations" like Gatsby depend on the topic library [0].

https://www.npmjs.com/browse/depended/event-source-polyfill

[ Parent | on HN ]