5 ms·

I'm glad we don't see this in npm post-install hooks... yet

• xigoi 4y ago
  Don't give them ideas.
  • DemocracyFTW2 4y ago
    Let me take this opportunity to thank today's sponsor, Whatever dot org. Yadda yadda yadda.
    • endre 4y ago
      .org is for the 90s. we live .io era these days (sadly)
      • account42 4y ago
        .io is already so yesteryear. There is/was .ai for a bit but its less generic.
    • gumby 4y ago
      I promise to leave more high-value comments if you can get me a deal with Whatever.
  • formerly_proven 4y ago
    "This dependency tree is sponsored by NordVPN. Staying safe online is an ever growing difficulty and you could be exploited by hackers. NordVPN allows you to change your IP address, making you harder to track, securing your privacy. Check out the link in the API docs to get 20% off for the first two months. Thanks NordVPN!"
  • TeMPOraL 4y ago
    It's not a new idea; npm had its run-in with ads a couple years back[0]. -- [0] - https://www.infoq.com/news/2019/08/npm-bans-package-ads/ https://www.infoq.com/news/2019/08/npm-bans-package-ads/
  • yencabulator 4y ago
    `gh api --silent -X PUT user/starred/evil/pleasedont` seems like it'd work for many users who leave magic tokens in their $HOME... I'm very much not a fan of ambient authorization.
• fragmede 4y ago
  That won't work because of CORSs, no?