Sunday, April 17, 2016

Fragile JavaScript NMP

There is a price for a large number of dependencies of JavaScript modules...

How one developer just broke Node, Babel and thousands of projects in 11 lines of JavaScript • The Register
"Programmers were left staring at broken builds and failed installations on Tuesday after someone toppled the Jenga tower of JavaScript. A couple of hours ago, Azer Koçulu unpublished more than 250 of his modules from NPM, which is a popular package manager used by JavaScript projects to install dependencies. Koçulu yanked his source code because, we're told, one of the modules was called Kik and that apparently attracted the attention of lawyers representing the instant-messaging app of the same name. According to Koçulu, Kik's briefs told him to rename the module, he refused, so the lawyers went to NPM's admins claiming brand infringement. When NPM took Kik away from the developer, he was furious and unpublished all of his NPM-managed modules.


link from: .NET Rocks! vNext: Xamarin Joins Microsoft!

No comments: