5 ms·

This is dumb. Node and npm had years to solve this issue. Really disrespectful towards the entire ecosystem. I get it: open source, bla bla, but get your horses

This is dumb. Node and npm had years to solve this issue. Really disrespectful towards the entire ecosystem. I get it: open source, bla bla, but get your horses together and fix this already

lucasmullens 5y ago
> fix this already They did.
- rmbyrro 5y ago
  I don't think all consequences are fixed. At this point, no one can assure the security of any npm package. What are they doing to restore confidence?
- jay_kyburz 5y ago
  No, the fix is a batteries included standard library for JavaScript and the death of NPM. I have high hopes for Deno.
bbrree66 5y ago
Spoken by someone who has never worked on large complex systems before.