in general npm does a not-too-great job with these things | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		internetter 4 months ago \| parent \| context \| favorite \| on: NPM debug and chalk packages compromised in general npm does a not-too-great job with these things

tripplyons 4 months ago [–]

Remember, NPM stands for Now Part of Microsoft!

(Microsoft owns GitHub, which owns NPM.)

thayne 4 months ago | [–]

Which means they don't have the excuse of being a volunteer effort to not be on top of this. MS has plenty of resources.

dabockster 4 months ago | | [–]

If you're running this kind of infrastructure online these days, you have every right to require payment somehow. Don't work for free.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact