'No Way to Prevent This,' Says Only Package Manager Where This Regularly Happens (kevinpatel.xyz)

submitted 2 days ago by rssbot@lemmy.bestiver.se to c/hackernews@lemmy.bestiver.se

5 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[-] numbermess@fedia.io 6 points 2 days ago

I made a wrapp er script named npm on my $PATH that passes input to pnpm instead because of this. I don't think my team is ready to adopt something like that, but it seems to be working okay so far. Nobody has complained.

[-] corsicanguppy@lemmy.ca 5 points 2 days ago

Npm repos violate iso27002. So, it's out. And we remember why iso27002 is important when we see news like this.

this post was submitted on 16 May 2026

62 points (100.0% liked)

Hacker News

4879 readers

595 users here now

Posts from the RSS Feed of HackerNews.

The feed sometimes contains ads and posts that have been removed by the mod team at HN.

Source of the RSS Bot

founded 2 years ago

MODERATORS

patrick@lemmy.bestiver.se

rssbot@lemmy.bestiver.se