3 ms·
Because thousands of people place their trust poorly.
by subway 10y ago
Because thousands of people place their trust poorly.
- nilliams 10y agoDo you have any specific complaints with npm?
- subway 10y agoReliance on transport security instead of providing cryptographic verification of code is my biggest beef, very closely followed by what is essentially a nonexistent reputation system (or, in lieu of a code reputation system, a curated selection of packages).
- deleted 10y ago[deleted]