News for hackers. Stuff that matters.

A comment on Left-Pad (2024). Parent comment

Re:Left-Pad (2024) by DanielHB on Wednesday June 11, 2025 @09:05AM (#44247177)
> NPM the company isn't curating NPM the registry

They do in fact curate the registry, mainly for reporting vulnerabilities to consumers and to remove malicious packages.

[ Parent | on HN ]
Re:Left-Pad (2024) by diggan on Wednesday June 11, 2025 @09:52AM (#44247640)
I'd probably call those things "maintenance" or "moderation" rather than "curation". Curation would imply they care about the quality, but in reality they just try to limit the damage of malicious packages.
[ Parent | on HN ]