3 ms·
Makes me wonder if there's a business opportunity. Make your own version of NPM, based off of the real NPM, but some level of auditing for package updates. Don'
by ufmace 8y ago
Makes me wonder if there's a business opportunity. Make your own version of NPM, based off of the real NPM, but some level of auditing for package updates. Don't report suspicious commits from new contributors right away, that sort of thing. Charge companies a few hundred $ a month to use your site instead of NPM, and they can update packages at will without risk of picking up something nasty.
Then again, the fact that nobody has done this already suggests that it wouldn't work.
- cellis 8y agoNot really: http://www.paulgraham.com/schlep.html http://www.paulgraham.com/schlep.html
- btbuildem 8y agoSchlep is precisely a business opportunity -- tedious drudgery that you have to do regularly OR can pay and not worry about it again.
- cellis 8y agoI think we're in agreement, sorry if that wasn't clear.
- tomjakubowski 8y agoI think GP was responding to the second paragraph, which suggested that this business might not be viable just because it hadn't yet been tried.
- ufmace 8y agoI never much liked dropping a link as a reply to a comment, because nobody can tell what you think about it. But I will say that indeed almost all viable businesses involve some amount of schlep. But just because something involves a lot of schlep doesn't make it a viable business.