70% of new NPM packages in last 6 months were spam

Re:70% of new NPM packages in last 6 months were spam by lolinder on Wednesday August 07, 2024 @08:48AM (#41180845)

Which, incidentally, some people seem to have forgotten when suggesting that NPM should start deleting things en masse.

[ Parent | on HN ]

Re:70% of new NPM packages in last 6 months were spam by pdimitar on Wednesday August 07, 2024 @09:14AM (#41181117)

What other outcome than "curation" do you see as a solution of the "bloat" problem?

[ Parent | on HN ]

Re:70% of new NPM packages in last 6 months were spam by dgfitz on Wednesday August 07, 2024 @10:25AM (#41181799)

A new npm-esque?

[ Parent | on HN ]

Re:70% of new NPM packages in last 6 months were spam by pdimitar on Wednesday August 07, 2024 @10:37AM (#41181932)

Meaning what exactly, sorry?

[ Parent | on HN ]

Re:70% of new NPM packages in last 6 months were spam by 3np on Wednesday August 07, 2024 @07:12PM (#41186471)

One possible outcome: Start considering it a public namespace (which in practice it's been not far from for a long time).

Meaning curation falls outside it and should not be centrally and unilaterally enforced by gating the entry.

We seem to be handling the bloated .com DNS namespace just fine.

[ Parent | on HN ]

Re:70% of new NPM packages in last 6 months were spam by pdimitar on Wednesday August 07, 2024 @07:30PM (#41186584)

> We seem to be handling the bloated .com DNS namespace just fine.

If you say so. I wouldn't think that.

[ Parent | on HN ]