3 ms·
The ecosystem is more than just NPM the company (or tool, or registry...). And I think the problem is far from superficial, if it was superficial it'd be trivia
by cnorthwood 8y ago
The ecosystem is more than just NPM the company (or tool, or registry...). And I think the problem is far from superficial, if it was superficial it'd be trivial to fix.
In theory the same applies to PyPI or Rubygems or whatever else you use too, but it's the fact that JavaScript packaging culture has grown to have many, small "does one thing well" packages that makes it harder to be across those which you are giving trust to.