Is this our chance to stop using NPM?
Is this our chance to stop using NPM?
Posted Jun 3, 2026 0:40 UTC (Wed) by fredi@lwn (subscriber, #65912)In reply to: Is this our chance to stop using NPM? by jepsis
Parent article: Multiple redhat-cloud-services npm packages compromised (StepSecurity Blog)
I like Javascript in general. However, here IMO is not the language in general as much as the fast moving changes in package managers of various languages change. And it is impossible following each of pip / pip3 / npm / upnp (jociing here) / whatever for each language, unless one has unlimited hours per day, and no real life.