3 ms·
Another month, another ridiculous issue involving NPM that has no place being in software with millions of weekly downloads. It really is never ending amateur
by cc-d 8y ago
Another month, another ridiculous issue involving NPM that has no place being in software with millions of weekly downloads.
It really is never ending amateur hour in the NPM community.
- binarymax 8y agoThis has nothing to do with NPM. It is a specific package published on NPM. Also, stereotyping and insulting the NPM community is nonconstructive and out of place. Vulnerabilities in packages happen all the time in all kinds of package managers. The lesson here is to not blind-trust any package you come across that might make your job easier.
- deleted 8y ago[deleted]