3 ms·
> How stupid of people to trust their package manager to be consistent and correct and return packages they were expecting. Obviously people shouldn't have tru
by RVuRnvbM2e 11y ago
> How stupid of people to trust their package manager to be consistent and correct and return packages they were expecting.
Obviously people shouldn't have trusted npm - that's the reason things broke in the first place!
> How does everyone taking the piss intend to protect themselves from this in their OS package manager, or PPM or composer or pip?
The usual method is to bundle dependencies rather than pull them down from the web at deploy-time. That or use a package manager with rather stronger guarantees on availability of packages.
> It's not javascript devs fault that the standard library is so piss poor you need these short code snippets
This is very true.
> the level of smugness here is absolutely ridiculous.
Also true, but funny nonetheless.