3 ms·
Didn't NPM break builds by completely swapping out the contents of a known module? Obviously NPM should not be relied on, but this really makes the case. NPM
by jsprogrammer 11y ago
Didn't NPM break builds by completely swapping out the contents of a known module?
Obviously NPM should not be relied on, but this really makes the case.
NPM will arbitrarily modify packages without notice -- this could be the unwinding of NPM.
- city41 11y agoYou give people too much credit. The vast majority won't notice or care.
- laughinghan 11y ago> For the record they made sure the exact same code was published to 0.0.3 so that I didn't maliciously inject anything. (elsewhere in this thread)
- brazzledazzle 11y agoI assume they're talking about the kik module.
- jsprogrammer 11y agoI was.