News for hackers. Stuff that matters.

A comment on NPM won't publish packages containing the word keygen. Parent comment

Re:NPM won't publish packages containing the word keygen by ricardobeat on Wednesday June 14, 2023 @10:01AM (#36326085)
Could it be that they are doing this as a way of preventing packages spoofing the namespace (ex. 'keygen-core')?
[ Parent | on HN ]
Re:NPM won't publish packages containing the word keygen by joshmanders on Wednesday June 14, 2023 @12:14PM (#36328140)
That would be terrible, because if someone owns the @express namespace that isn't express team (not gonna happen, just illustrating why this idea is bad), then goodbye all `express-*` packages.
[ Parent | on HN ]