3 ms·
I'm not entirely versed in NPM politics, but: 1) GitHub and npm are supposed to be separate things. There might be stuff in that GH account that affects other
by toyg 5y ago
I'm not entirely versed in NPM politics, but:
1) GitHub and npm are supposed to be separate things. There might be stuff in that GH account that affects other ecosystems. By all means block the npm account, but that should be it.
2) in the end, one is responsible for the packages one pulls. We keep relearning that lesson over and over, because global package repositories made us lazy.
- fault1 5y ago> GitHub and npm are supposed to be separate things. Is that going to be true forever? I would assume not. There is already much deeper integration between github and npm than there was a few years ago, and Github seems to be going fairly deeply into CI and distribution.
- toyg 5y agoIf that's the case, people will have to start practicing account hygiene...