3 ms·
> but doing that to an open source repository meh. It's owned by Microsoft - aside from the regular morals of spam and whatever, I don't think it's especially
by madeofpalk 4y ago
> but doing that to an open source repository
meh. It's owned by Microsoft - aside from the regular morals of spam and whatever, I don't think it's especially bad to target a Microsoft property.
How much of the NPM registry actually is open source?
- lookdangerous 4y agoHow about instead of who owns it, ask who uses it?
- Nextgrid 4y agoI don't think this would affect most developers? The value of NPM is a host of packages that you reference in package.json, not its web UI. The spam on the web UI is dangerous for victims that land there via search engines, but I don't think this would affect NPM's actual users that much?
- lookdangerous 4y agoThanks for clarifying the situation
- madeofpalk 4y agoI use NPM regularly and I've never been impacted by this spam.
- delfinom 4y agoIt's owned by GitHub first and foremost. Microsoft owns GitHub but there's independence between the two.
- kaba0 4y agoMy city’s public transport system is owned by a private company, am I not harming the very public (over the private entity) if I were to make a mess in a tram?