Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Honestly, I feel most of the blame falls to NPM for allowing publishers to delete packages. This doesn't happen in other ecosystems (e.g. Java).


Afterward, they changed their policies so that this can't happen again.


Most of the blame falls to npm Inc for bending over backwards to a corporation for a bogus trademark claim they weren't even involved in.

Sure, left-pad being deleted was what resulted in most people's problems but this was just the fallout from npm Inc forcibly reassigning an actively used package name from a major open source contributor to appease a company that didn't even threaten them directly.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: