3 ms·
> Transparency is key in maintaining the trust of our community. and yet a security incident where it was possible to publish any npm package without authentic
by thayne 5y ago
> Transparency is key in maintaining the trust of our community.
and yet a security incident where it was possible to publish any npm package without authentication is nine paragraphs down, and isn't alluded to at all in the page or section titles. I'm not sure that's entirely in the best spirit of transparency.
- emteycz 5y agoWasn't it fixed years ago?
- agency 5y agoI believe it says the issue the OP is alluding to was reported and fixed on Nov 2 - two weeks ago.
- jabbany 5y agoAt least the details were there. It's not the best organization but they also didn't withhold anything.
- croes 5y agoHide it in the open isn't any better
- deleted 5y ago[deleted]