Aube – Node.js package manager in Rust
aube.en.dev
Aube – Node.js package manager in Rust
1–7 of 7 posts
Re: Aube – Node.js package manager in Rust
#2Interesting has a 24hr cooldown before trusting package updates and a no-trust option for trusting downgrades given all the npm hacks and issues lately, smart move. I wonder if there's better ways to protect against this.
Re: Aube – Node.js package manager in Rust
#3Interesting has a 24hr cooldown before trusting package updates and a no-trust option for trusting downgrades given all the npm hacks and issues lately, smart move. I wonder if there's better ways to protect against this.
Same here; I hope the vulnerability discovery process evolves from "letting somebody else find out first". There are tons of vendors that scan the ecosystem, but I'd love something that works automatically at the point of install
Re: Aube – Node.js package manager in Rust
#4appears vibecoded which doesn't give me confidence, still interesting though.
pnpm has also moved a few of its components from javascript to rust in its latest release
Re: Aube – Node.js package manager in Rust
#5[dead]
Re: Aube – Node.js package manager in Rust
#6appears vibecoded which doesn't give me confidence, still interesting though. pnpm has also moved a few of its components from javascript to rust in its latest release
> appears vibecoded
??
It's from the author of mise, https://mise.en.dev/.