2 ms·
I'm reminded of when npm released 5.7.0 (which some got upgraded to automatically because it wasn't tagged as pre-release) and had a critical bug that deleted y
by SilasX 6y ago
I'm reminded of when npm released 5.7.0 (which some got upgraded to automatically because it wasn't tagged as pre-release) and had a critical bug that deleted your system files.
https://news.ycombinator.com/item?id=16435305 https://news.ycombinator.com/item?id=16435305
- throwanem 6y agoWhy? What on Earth do you imagine that having to do with this?
- SilasX 6y agoIt was a new version (with significant nasty surprises), albeit .7.0 instead of .0.0.
- throwanem 6y agoIt was a new minor version, of a totally different package, which was version-tagged in such a way that some distro packagers picked it up when they shouldn't have, and which happened to contain a bug affecting a use case that's been deprecated for at least half a decade now. Look, I get that there's a lot of hate for modern JS, and it's hardly as if there is any lack of basis for criticism, just as there is with every other highly active, heavily adopted, and fast-evolving software ecosystem. But mistaking this kind of uninformed slagging for meaningful commentary says more about the person who does it than about the subject of their ire.