3 ms·
But who would use those spam packages in their project? Don't don't do anything.
by Mashimo 2y ago
But who would use those spam packages in their project? Don't don't do anything.
- vb-8448 2y agoI don't know if they managed to fix it in recent years, but JS dependencies management used to be broken. I think the left-pad[0] incident is the most known one, but not the unique one. My guess is that you spam enough, at some point in time one of the packages will go viral. [0] https://en.wikipedia.org/wiki/Npm_left-pad_incident https://en.wikipedia.org/wiki/Npm_left-pad_incident
- throwitaway1123 2y agoThis was fixed years ago, and of course people then complained about not being able to remove their packages [1]. [1] https://news.ycombinator.com/item?id=38874874 https://news.ycombinator.com/item?id=38874874