I like this pip metaphor. If we had required `--trust-remote-code` for every `np... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		rfoo on July 6, 2023 \| parent \| context \| favorite \| on: InternLM – new open source 7B LLM I like this pip metaphor. If we had required `--trust-remote-code` for every `npm install` we could have avoided left-pad and most of the software supply chain drama in the past years.

SahAssar on July 6, 2023 | [–]

How would that have avoided left-pad? Do you just mean that people would have been discouraged from pulling in so many dependencies?

jsight on July 6, 2023 | [–]

I think that would just teach people to type --trust-remote-code fast.

Consider applying for YC's Fall 2025 batch! Applications are open till Aug 4
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact