When "Everything" Becomes Too Much: The npm Package Chaos of 2024 - Socket
socket.dev
An NPM user named PatrickJS launched a troll campaign with a package called "everything," which depends on all public npm packages.
  • locuester@lemmy.zipEnglish
    7·
    11 months ago

    Yeah then you’ve got security problems. If a maintainer pulls a package, you wouldn’t want some rando able to push a new one in its place.