3 ms·
When will npm finally take security seriously? How many incidents do they need? Don’t allow non hardware mfa and add verified namespaces already!
by asylteltine 3y ago
When will npm finally take security seriously? How many incidents do they need? Don’t allow non hardware mfa and add verified namespaces already!
- lainga 3y agoNever. It is this way for cosmogonical reasons; it fulfils a purpose. I see Isaac Schlueter as the modern Genghis: "If you had not committed great sins, God would not have sent a punishment like me upon you."
- mikeryan 3y agoIt’s not NPMs job to secure your repo. They provide the tools to protect it. It’s your job as a maintainer to not shoot yourself in the foot.