|
|
Log in / Subscribe / Register

Is this our chance to stop using NPM?

Is this our chance to stop using NPM?

Posted Jun 1, 2026 18:02 UTC (Mon) by jepsis (subscriber, #130218)
In reply to: Is this our chance to stop using NPM? by zdzichu
Parent article: Multiple redhat-cloud-services npm packages compromised (StepSecurity Blog)

Use pnpm instead of npm, enable the strictest security settings, and configure a reasonable release cooldown period.

to post comments

Is this our chance to stop using NPM?

Posted Jun 3, 2026 0:40 UTC (Wed) by fredi@lwn (subscriber, #65912) [Link]

I like Javascript in general. However, here IMO is not the language in general as much as the fast moving changes in package managers of various languages change. And it is impossible following each of pip / pip3 / npm / upnp (jociing here) / whatever for each language, unless one has unlimited hours per day, and no real life.


Copyright © 2026, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds