3 ms·
Judging from the article, most of these problems seem to have manifested on NPM. Is there a reason for that?
by denton-scratch 4y ago
Judging from the article, most of these problems seem to have manifested on NPM. Is there a reason for that?
- forgotpwd16 4y agoThe node ecosystem takes the micro-package architecture to extreme. Examples are the infamous is-odd and is-even that is just `return !isOdd(i)`. The result of building an app utilizing numerous dependencies and the dependecy tree that is formed is an increased incident surface.
- the-printer 4y agoFrom my vantage point: Lots of people use Node and projects built with it seem notorious for having a lot of dependencies, so incidents such as the ones listed are high profile and easily proliferated.
- dtolnay 4y agoNPM has an order of magnitude more packages than the other language-specific package registries. It has more packages than every other registry put together (including Maven Central, PyPI, crates.io, etc). http://www.modulecounts.com http://www.modulecounts.com