3 ms·
In the real world, do wealthy companies want to be named on this list of 3 or 4 groups spamming NPM? That’s a lot different than being seen buying a banner ad.
by mindcandy 4y ago
In the real world, do wealthy companies want to be named on this list of 3 or 4 groups spamming NPM? That’s a lot different than being seen buying a banner ad.
- pipo234 4y agoThat's probably where the reputation part would come in - fair enough. Still, a large wealthy company might consider creating an "unaffiliated" front company to act on their behalf. For example, take out a legit open source competitor by having the front publish a mediocre bogus project with very similar name. Or paying a small fee to bundle malware into a legit FOSS. So, similar to Twitter's blue check mark - Yes, asking a "small fee" adds friction, but it's not an obstacle to the wealthy.
- justinclift 4y agoMost of that seems _very_ theoretical, with the exception of "paying to bundle malware into legit FOSS". Unfortunately, that last one deserves a special Fuck You to the main developers of FileZilla, who have knowingly bundled malware for years. :( For anyone that doesn't know about it, here's a forum thread about it they haven't deleted: https://forum.filezilla-project.org/viewtopic.php?t=50565 https://forum.filezilla-project.org/viewtopic.php?t=50565