Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (Cyborg)
  • No Skin
Collapse
Brand Logo

CIRCLE WITH A DOT

  1. Home
  2. Uncategorized
  3. Is NPM the new DNS?

Is NPM the new DNS?

Scheduled Pinned Locked Moved Uncategorized
4 Posts 3 Posters 0 Views
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • sawaba@infosec.exchangeS This user is from outside of this forum
    sawaba@infosec.exchangeS This user is from outside of this forum
    sawaba@infosec.exchange
    wrote last edited by
    #1

    Is NPM the new DNS?

    As in, "it's always NPM"

    gsuberland@chaos.socialG tarah@infosec.exchangeT 2 Replies Last reply
    0
    • sawaba@infosec.exchangeS sawaba@infosec.exchange

      Is NPM the new DNS?

      As in, "it's always NPM"

      gsuberland@chaos.socialG This user is from outside of this forum
      gsuberland@chaos.socialG This user is from outside of this forum
      gsuberland@chaos.social
      wrote last edited by
      #2

      @sawaba every time I review a customer's code and it's node I generate a report of every single transitive dependency they're pulling in and so far the median is hovering somewhere around 350. a few of them have been north of 1000. and that's before you count distinct versions used across different components, which usually inflates the number by another 50-200%. completely untenable behaviour for an ecosystem.

      gsuberland@chaos.socialG 1 Reply Last reply
      0
      • gsuberland@chaos.socialG gsuberland@chaos.social

        @sawaba every time I review a customer's code and it's node I generate a report of every single transitive dependency they're pulling in and so far the median is hovering somewhere around 350. a few of them have been north of 1000. and that's before you count distinct versions used across different components, which usually inflates the number by another 50-200%. completely untenable behaviour for an ecosystem.

        gsuberland@chaos.socialG This user is from outside of this forum
        gsuberland@chaos.socialG This user is from outside of this forum
        gsuberland@chaos.social
        wrote last edited by
        #3

        @sawaba npm is the "we and our 347 trusted partners" of the development world

        1 Reply Last reply
        0
        • sawaba@infosec.exchangeS sawaba@infosec.exchange

          Is NPM the new DNS?

          As in, "it's always NPM"

          tarah@infosec.exchangeT This user is from outside of this forum
          tarah@infosec.exchangeT This user is from outside of this forum
          tarah@infosec.exchange
          wrote last edited by
          #4

          @sawaba it couldn’t be NPM

          1 Reply Last reply
          1
          0
          • R relay@relay.infosec.exchange shared this topic
          Reply
          • Reply as topic
          Log in to reply
          • Oldest to Newest
          • Newest to Oldest
          • Most Votes


          • Login

          • Login or register to search.
          • First post
            Last post
          0
          • Categories
          • Recent
          • Tags
          • Popular
          • World
          • Users
          • Groups