3 ms·

I’ve been saying this for years: https://news.ycombinator.com/item?id=17514541 https://news.ycombinator.com/item?id=17514541 Though rather than mandating it, j

by koolba 5y ago

I’ve been saying this for years: https://news.ycombinator.com/item?id=17514541 https://news.ycombinator.com/item?id=17514541 Though rather than mandating it, just show if the publisher has it enabled and let the market decide.

thenickdude 5y ago
Yes, I'd love it if NPM would mark any package as insecure if it transitively depended on a developer that didn't use 2FA.