3 ms·
> This briefly allowed consumers of replicate.npmjs.com to potentially identify the names of private packages When I was reading this, I thought the time frame
by xpressvideoz 5y ago
> This briefly allowed consumers of replicate.npmjs.com to potentially identify the names of private packages
When I was reading this, I thought the time frame would likely have been on a time scale of hours (or even minutes),
> exposed between October 21 13:12:10Z UTC and October 29 15:51:00Z UTC
But it's actually more than one week. Do we consider one week as "brief"?
- progbits 5y agoRight, and they don't even confirm who might have seen that list, except that "the data on this service is consumed by third-parties who may have replicated the data elsewhere". So basically consider all private package names as of that date forever public.