ChALkeR/notes

View on GitHub ↗ ★ 1,275

Some public notes

21 mentions on Hacker News by 17 people: 15 stories, 6 comments · first 2015-12-04 · latest 2022-05-05

Mentions per year 21 mentions · busiest year 2017 (13)

20082026

All Stories Comments Newest Top Oldest

…less of a reputation and might be malicious, as was the case with the event-stream package.[1] [0] https://github.com/ChALkeR/notes/blob/master/Gathering-weak-... [1] https://www.eweek.com/security/node.js-event-stream-hack-exp...
comment by dane-pgp · 2022-05-05 · in GitHub will require 2FA by the end of 2023
Reproducible builds, sure. Security? that's a different story. https://github.com/ChALkeR/notes/blob/master/Gathering-weak-... - node ships with npm - npm has a high number of dependencies - npm does not implement good practices around…
comment by 29athrowaway · 2020-05-14 · in Deno 1.0
…but a hello world app requires 203 modules and that's not really a safe position to start new apps. https://github.com/ChALkeR/notes/blob/master/Do-not-underest...
comment by benologist · 2017-11-04 · in Show HN: Server.js – A modern Express alternative
And then this happens: https://github.com/ChALkeR/notes/blob/master/Improper-markup...
comment by joepie91_ · 2017-07-18 · in Myspace lets you hijack any account just by knowing the person’s birthday
…credentials leaks have been littered across the community and they've been aware since 2015. See https://github.com/ChALkeR/notes/blob/master/Do-not-underest... for more information.
comment by micaksica · 2017-06-07 · in The Great Suspender developer account hacked, extension pulled from Chrome Store
…https://docs.npmjs.com/misc/scripts [2] https://github.com/node-forward/discussions/issues/29 [3] https://github.com/ChALkeR/notes/blob/master/Do-not-underest... [4] https://www.npmjs.com/package/isarray EDIT: Ironically, this module…
comment by micaksica · 2016-08-08 · in Show HN: Auto install npm dependencies as you code