3 ms·
The leftpad fiasco (which I believe NPM has now mitigated), and the recent security issue where a certain popular package was uploading any passwords it found s
by addicted 8y ago
The leftpad fiasco (which I believe NPM has now mitigated), and the recent security issue where a certain popular package was uploading any passwords it found showed the current dangers with NPM.
- untog 8y agoI'm not arguing about the security of NPM, rather the idea that multiple modules is a bad thing.
- erik_seaberg 8y agoThe lesson from left-pad should have been to vendor all your deps rather than bet your org on third parties with no SLA commitment to you.