News for hackers. Stuff that matters.

A comment on 70% of new NPM packages in last 6 months were spam. Parent comment

Re:70% of new NPM packages in last 6 months were spam by WA on Wednesday August 07, 2024 @08:56AM (#41180924)
It's two things really: a small standard library and sheer size of developer community. JS has way more developers than any other language. But if you search for "$PROGRAMMING_LANGUAGE supply chain issues" you literally find reports for all popular languages.

[1] claims that half of Python packages have security issues.

[2] says that the Rust supply chain has security issues.

just as two examples.

---

[1]: https://www.theregister.com/2021/07/28/python_pypi_security/

[2]: https://news.ycombinator.com/item?id=40864787

[ Parent | on HN ]

There are no comments on this comment yet.