#packagemanagement — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #packagemanagement, aggregated by home.social.
-
🐍 Beware the mighty "Mini Shai-Hulud," devouring npm packages like a snack! 🍿 Apparently, "314" is the new "317," but who’s counting in the world of open-source chaos? 🤷♂️ Just another day in the life of developers pretending they can control the uncontrollable. 🙃
https://safedep.io/mini-shai-hulud-strikes-again-314-npm-packages-compromised/ #MiniShaiHulud #npmChaos #openSourceDev #packageManagement #developerLife #HackerNews #ngated -
Yes, I find reporting to downstream packagers (a.k.a. distributors) extremely relevant! When your favorite #SoftwareCenter or #PackageManager is all for linking to upstream, but not to those who directly affect your package in a supply chain, as a result, tops like in #KeePassXC get all the pinecones: there is no enthusiasm in an average user to link back those issues to downstream, not with the p(l)ain text and how derivatives are communicated anyway... :blobcat_flop_woozy:
#software #SoftwarePackage #SoftwarePackages #SoftwarePackageManagement #PackageManagement