this post was submitted on 22 Jun 2023
338 points (99.1% liked)

Programming

17195 readers
700 users here now

Welcome to the main community in programming.dev! Feel free to post anything relating to programming here!

Cross posting is strongly encouraged in the instance. If you feel your post or another person's post makes sense in another community cross post into it.

Hope you enjoy the instance!

Rules

Rules

  • Follow the programming.dev instance rules
  • Keep content related to programming in some way
  • If you're posting long videos try to add in some form of tldr for those who don't want to watch videos

Wormhole

Follow the wormhole through a path of communities [email protected]



founded 1 year ago
MODERATORS
 

I've heard people mention curl and imagemagick. Any others that you know about?

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 63 points 1 year ago* (last edited 1 year ago) (7 children)

Left pad https://arstechnica.com/information-technology/2016/03/rage-quit-coder-unpublished-17-lines-of-javascript-and-broke-the-internet/

Had GPT summarize what happened.

The "left pad" incident refers to a controversy that arose in 2016 when a developer named Azer Koçulu removed his JavaScript package called "left-pad" from the NPM (Node Package Manager) registry. This caused a ripple effect, breaking numerous projects that relied on this package and highlighting the potential risks of relying on external dependencies. The incident sparked a debate about the stability and trustworthiness of the open-source ecosystem and led to discussions about best practices for managing dependencies in software development.

[–] [email protected] 7 points 1 year ago (2 children)

From memory the NPM blokes had to have a think about how they handle important packages because of that. Didn't they revert the changes to left pad to ensure everything else didn't break?

Fascinating to see the house of cards some of these solutions / libraries are built off

[–] [email protected] 3 points 1 year ago

Yeah I'm pretty sure Github themselves restored the package if I recall correctly

load more comments (1 replies)
load more comments (5 replies)