28 ms·
> I think package managers such as npm should require package maintainers to sign a legally binding agreement that they're not going to willfully do stuff like
by arvinsim 5y ago
> I think package managers such as npm should require package maintainers to sign a legally binding agreement that they're not going to willfully do stuff like this.
I would think this would discourage a lot of people to contribute to NPM.
It's not about enforcement but the threat.
- 29athrowaway 5y agoSure but you cannot build something serious without guarantees. Maybe you can set a flag in your package.json which enables only the usage of packages from authors that have agreed.