Live data from Hacker News

Safe Chain prevents developers from installing malware

npmjs.com

1–3 of 3 posts

Re: Safe Chain prevents developers from installing malware

#2
I think it’s a valiant effort, but misses the forest for the trees.

It’s another dependency - which comes with 6 more dependencies. One of which is ‘Chalk’, which was one of the recently malware-infected packages. Unless it’s a joke, and the Chalk dependency is just the punchline.

Re: Safe Chain prevents developers from installing malware

#3

I think it’s a valiant effort, but misses the forest for the trees. It’s another dependency - which comes with 6 more dependencies. One of which is ‘Chalk’, which was one of the recently malware-infected packages. Unless it’s a joke, and the Chalk dependency is just the punchline.

[dead]