Re:Snyk security researcher deploys malicious NPM packages t...
by cloverich on Tuesday January 14, 2025 @11:50AM
(#42699878)
History of "micro dependencies" where many flexible utilities are split up into separate packages, such that many npm dependencies are a single function (ie rather than a package exporting ten methods, its ten separate dependencies).
Then because there is no standard library, many reinventions of similar but incompatible utilities. etc.
Then because there is no standard library, many reinventions of similar but incompatible utilities. etc.