For C++ there are Boost, Folly, Absl, several more large libraries with reputabl... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		progbits 5 months ago \| parent \| context \| favorite \| on: NPM debug and chalk packages compromised For C++ there are Boost, Folly, Absl, several more large libraries with reputable orgs behind them. I'm surprised someone doesn't make a big npm lib like that. Not hating on the author but I doubt similar compromise would happen to Facebook or Google owned package.

ChocolateGod 5 months ago [–]

> doesn't make a big npm lib like that.

People have done, but the ecosystem has already engrossed around the current status quo and it's very hard to get rid of habits.

example https://github.com/stdlib-js/stdlib

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact