logoalt Hacker News

PunchyHamsteryesterday at 7:17 PM3 repliesview on HN

Don't write anything backend or cli tool in NPM would be good start


Replies

ljmtoday at 1:48 PM

Security by obscurity. If another language became as ubiquitous as JS then it'd be the same.

In the context of TFA, don't rely on third party github actions that you haven't vetted. Most of them aren't needed and you can do the same with a few lines of bash. Which you can also then use locally.

MetaWhirledPeasyesterday at 9:01 PM

Other package managers are magically immune?

show 3 replies