News for hackers. Stuff that matters.

A comment on NPM Vulnerability Discussion on Twitter. Parent comment

Re:NPM Vulnerability Discussion on Twitter by cxr on Tuesday May 10, 2022 @03:17PM (#31331358)
You're tacitly giving the people you despise leverage when you say things like:

> The core infrastructure of Javascript is in it. Babel[...]

Babel is not core JS infrastructure. It may be close to fundamental to the modern NodeJS development experience, but JS exists happily (and capably) without any of that stuff (including package.json, for that matter).

[ Parent | on HN ]
Re:NPM Vulnerability Discussion on Twitter by ratww on Tuesday May 10, 2022 @04:40PM (#31332394)
Fair enough! True, Babel is only "core" for a subset of JS developers, not for the language.

I don't really despise anyone in Babel, though, I'm only criticising their packaging method. Babel isn't doing the million-packages thing to gain popularity.

[ Parent | on HN ]