3 ms·
The trademark issue is actually of minor importance here. What is being highlighted is that a publisher of a large number of npm modules removed all of his mod
by coreyp_1 11y ago
The trademark issue is actually of minor importance here. What is being highlighted is that a publisher of a large number of npm modules removed all of his modules. This broke some people's builds, but, more importantly, drew attention to 2 HUGE security issues:
1.) NPM arbitrarily gave control of a package to a 3rd party, who can then do all manner of evil with it, if they so prefer.
2.) The namespaces of all of these somewhat widely-used packages are now up for grabs. That is, you could make your own malicious version, upload it to NPM, and now all of those builds in all of those different projects will now use your malicious code.
The issue isn't trademark, it's security. That's why it's on the front page of HN.