I will pay you cash to delete your NPM module
drewdevault.com
I will pay you cash to delete your NPM module
1–10 of 60 posts
Re: I will pay you cash to delete your NPM module
#2if isArray gets deleted, can't someone else swap it for a malicious package? And it will automatically get 51M weekly downloads?
Re: I will pay you cash to delete your NPM module
#3Wow, what a power move.
Re: I will pay you cash to delete your NPM module
#4Hmm, so now if you sign up for a paid Sourcehut account, you’re supporting JavaScript ecoterrorism? This will be interesting.
Re: I will pay you cash to delete your NPM module
#5Hmm, so now if you sign up for a paid Sourcehut account, you’re supporting JavaScript ecoterrorism? This will be interesting.
Did you read the conclusion [1] of the post?
[1] https://drewdevault.com/2021/11/16/Cash-for-leftpad.html#con...
Re: I will pay you cash to delete your NPM module
#6Anti-Open Source for real.
What about people who value helping others more than the money? and Disagree about the value of the "help" an `npm` package actually is? I like this idea but I can see there's room for disagreement.
Say there's a particularly problematic package... are you justified in hiring a bounty coder to replace it? How about a bounty hunter to eliminate its current maintainer? Is the action more moral if many people gang up to fund and direct the bounties' goals?
Telling people their "gifts to the world" shouldn't exist isn't likely to make you popular. The dumpster fire of NPM being a public hazard is hard to argue against too, so its a hard one.
Re: I will pay you cash to delete your NPM module
#7You cannot actually do this at npmjs.org, regularly used packages can only be marked "deprecated" now: https://docs.npmjs.com/policies/unpublish
Re: I will pay you cash to delete your NPM module
#8Anti-Open Source for real . What about people who value helping others more than the money? and Disagree about the value of the "help" an `npm` package actually is? I like this idea but I can see there's room for disagreement. Say there's a particularly problematic package... are you justified in hiring a bounty coder to replace it? How about a bounty hunter to eliminate its current maintainer? Is the action more mor…
Re: I will pay you cash to delete your NPM module
#9This is a wonderful idea. I know it’s a joke, but we need to start thinning the numbers of js trash packages. There won’t be a software industry if 1 in X deps installs ransomware, rats, infostealers and miners.
Re: I will pay you cash to delete your NPM module
#10This is hard to convince developers to reduce the number of direct (and indirect) dependencies. I already try to reduce dependencies of Ava - a JavaScript test runner. However, I encountered obstacles such as [1]. I gave up and switched to a by-design zero-dependency test runner named oletus [2].
[1] https://github.com/tarruda/has/pull/16 [2] https://github.com/bearror/oletus