3 ms·
So they didn't learn anything from left-pad situation from 1.5 year ago? Packages that are published should be immutable, just like in maven repo case.
by krzyk 9y ago
So they didn't learn anything from left-pad situation from 1.5 year ago?
Packages that are published should be immutable, just like in maven repo case.
- tbrock 9y agoThat’s fine but it doesn’t prevent newer packages from being published by new owners as is happening here.
- briandear 9y agoIsn't that how RubyGems works?
- dmitriid 9y agoThey sweared this would never happen again. Then it happened again not two months after left-pad. And now it happened again.
- christophilus 9y agoThey don't allow removal of packages. This is likely a cascading storage failure or something along those lines (or else a major hack).
- lotyrin 9y agoI don't really understand any public package repository that fails to have immutable package versions and publisher-namespaced package names.
- schmookeeg 9y agoI'm looking forward to envying the blokes who release blockchain-repo and make a gozillion bucks for solving this problem. :)