At the beginning, but not anymore. You still have the option to pull libraries a... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		allanmacgregor 15 days ago \| parent \| context \| favorite \| on: Shai-Hulud Returns: Over 300 NPM Packages Infected At the beginning, but not anymore. You still have the option to pull libraries and packages but is not really required by default.

jacquesm 15 days ago [–]

Oh that's great news I will have to look at it again then. That was a huge turn-off for me, to take one of the most well respected and reliable eco systems and then to pull in one of the worst as a dependency. Thank you for clearing that up.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact