There absolutely is an easy solution to these problems, and Linux has been doing... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

venturecruelty 6 months ago | parent | context | favorite | on: Shai-Hulud Returns: Over 300 NPM Packages Infected

There absolutely is an easy solution to these problems, and Linux has been doing it forever: package maintainers. Don't treat your repository like a superfund site, and it won't fill up with garbage.

zahlman 6 months ago [–]

That solution is not easy, and as stated it takes work. And there is a serious problem of funding people to do that work.

And it has not yet been demonstrated at PyPI/NPM scale, either.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact