I’ve heard people mention curl and imagemagick. Any others that you know about?

  • OneDimensionPrinter@lemm.ee
    link
    fedilink
    English
    arrow-up
    17
    ·
    edit-2
    1 year ago

    Left pad https://arstechnica.com/information-technology/2016/03/rage-quit-coder-unpublished-17-lines-of-javascript-and-broke-the-internet/

    Had GPT summarize what happened.

    The “left pad” incident refers to a controversy that arose in 2016 when a developer named Azer Koçulu removed his JavaScript package called “left-pad” from the NPM (Node Package Manager) registry. This caused a ripple effect, breaking numerous projects that relied on this package and highlighting the potential risks of relying on external dependencies. The incident sparked a debate about the stability and trustworthiness of the open-source ecosystem and led to discussions about best practices for managing dependencies in software development.

    • Torty@beehaw.org
      link
      fedilink
      English
      arrow-up
      8
      ·
      1 year ago

      This is the one I came to post about. The fact there’s a library for this is so stupid to me.

      I feel like it demonstrates how npm and modules have probably to some degree gotten out of hand.

    • AnonymousLlama@kbin.social
      link
      fedilink
      arrow-up
      2
      ·
      1 year ago

      From memory the NPM blokes had to have a think about how they handle important packages because of that. Didn’t they revert the changes to left pad to ensure everything else didn’t break?

      Fascinating to see the house of cards some of these solutions / libraries are built off

      • JackbyDev@programming.dev
        link
        fedilink
        arrow-up
        5
        ·
        1 year ago

        Yes. They added it back. The policy now is that you can’t remove packages that are depended on (or something to that extent, I don’t know the specifics).