4 ms·
> Isn't adding another potentially unknown maintainer generally better for the community than a project dying? No, not if the project becomes malicious. I'd ra
by mtgx 8y ago
> Isn't adding another potentially unknown maintainer generally better for the community than a project dying?
No, not if the project becomes malicious. I'd rather it died and I switched to an alternative I can trust.
- softawre 8y agoMaybe a compromise would be some sort of obvious notification (via the website and also via the npm cmdline software) if a maintainer changed.