

That sounds more like bad practices from the community. It definitely has ways to use exact versions. Not the least of which the lock file. Or the shrinkwrap file which public packages should be using.


That sounds more like bad practices from the community. It definitely has ways to use exact versions. Not the least of which the lock file. Or the shrinkwrap file which public packages should be using.


Genuine question. How is NPM more vulnerable than other repos? Haven’t similar supply chain attacks succeeded at least as well as this one through GitHub itself and even Linux package repos?


It’s not an ad hominem. It’s literally their name.


Ah yes, more wise words from … fartmaster69…


Yea, Kenneth Copeland is the closest to a demon walking this earth I can think of. and that is including the dictators and mass murderers… Dude’s the perfect example of the subterfuge and corruption a demon as described in literature would bring to Christianity. An absolute corrupting force wearing the guise of good intentions.


Nope. I grew up a Christian. I know exactly how those ‘nice’ Christians think.
They might be nice to people they like and understand, but their ignorance is profound and troubling to anyone with an actusl broad understanding of the world.


Your experience is rare and you should cherish it, then.


Every Christian and most any Islam sect is also guilty of building a highly judgmental and insanely insular “community”, too.


Then allow me to refine my point to specify organized religion’s teachings. Sure, many develop a community, but they develop a community that specifically judges and ostracizes anyone not conforming to their extremely narrow belief system.
Most of organized religions leverage those negative aspects to further control their ‘flock’. There are many aspects that are outright horrible for individuals, not the least of which is believing things for the simple fact that an authority said so.
I’m not against people building community. I am very against people building insular, hierarchical, tyrranical systems that brainwash people into foolish or down right horrible behavior.


Yea people are crazy, so why would you defend something that makes them even less attached to reality??


Yea go ahead and get back to me when a birthday party involves killing someone and celebrating it.


Life satisfaction of the mentally unstable is a curious measure to go by. Everybody knows being totally fine in an unhealthy world is a sign of mental disorder itself…


Nope. I know what the religions do, and you are in denial.


I hate to break it to you, but those 66% are conducting crusades… Just look at all the fucking brainless Christogooners celebrating the war on Iran…
No, not all Christians/Islamists are bad, but their religions are.


Silencing the inner monologue over the most bsnal explanations and/or wishful thinking ever is … a mental disorder.
There is much wrong with the world. To pretend otherwise is at best denial.


Yes, the entire human race is contemptible. I’m glad we could arrive at this conclusion.


Exactly. and the vast majority of how ‘religion’ is used today is …


Religion is a mental disorder. Prove me wrong. (with actual studies and not anecdotes)


We could only be so lucky
I wouldn’t say pulling in higher versions is unsafe unless an attack like this succeeds. Otherwise it’s only an annoyance.