Parts of this have been linked to here over the past week or so, but I don't think the full picture was discussed yet. Even ignoring the conspiracy aspects, it'

Parts of this have been linked to here over the past week or so, but I don't think the full picture was discussed yet. Even ignoring the conspiracy aspects, it's another set of packages where a change in the upstream has had an effect on a number of other projects. How to manage and handle this is an interesting topic that is largely unsolved... One example (linked in the Ars piece) is the AWS Cloud Developer Kit: https://github.com/aws/aws-cdk/issues/18323 https://github.com/aws/aws-cdk/issues/18323 HN History: https://hn.algolia.com/?dateEnd=1641938400&dateRange=custom&dateStart=1641074400&page=0&prefix=true&query=Faker.js&sort=byPopularity&type=story https://hn.algolia.com/?dateEnd=1641938400&dateRange=custom&...