Hoo boy am I tired of seeing messages in my browser's JavaScript from some deep transitive dependency of the app I work on, saying "We're about to remove support for <feature that a slightly less nested transitive dependency uses>, sucks to be you."
This whole developer ecosystem is a nightmare of endless compatibility problems, 90% of them trivially avoidable with a moment's thought.
Exactly when I needed it, it appeared to me: NPM's workspaces feature.
Workspaces is a generic term that refers to the set of features in the npm cli that provides support to managing multiple packages from your local file system from within a singular top-level, root package.
workspaces | npm Docs https://docs.npmjs.com/cli/v8/using-npm/workspaces
It seems that while I was building my huge monorepo in good old JS5 #javascript I missed the #npm workspaces concept that emerged somewhere along those years.
Now that I hit the wall with #deno and a bunch of dependency-wise intertwined packages, I've learned about deno's workspace feature that is a reimplementation of npm's workspaces.
Ok, let me see if I can organize my code using workspace(s)...
Malware Found on npm Infecting Local Package With Reverse Shell, by @reversinglabs.com:
https://www.reversinglabs.com/blog/malicious-npm-patch-delivers-reverse-shell
All #permacomputing projects built with #NPM and #JS are useless. Sorry, you didn't understand permacomputing *at all* . If you at least used Golang, it would run on relatively old machines. But, with #JS, you are just losing both yours and our time.
AnimeJS v4 has landed. Boy oh boy, it’s probably the sickest JavaScript library for animations.
Anyone else seeing #npm package installation failures? I can see https://status.npmjs.org/incidents/hdtkrsqp134s, but the "scoped to certain keywords" is both weasel-wording and confusing ... #npmjs #javascript #devops
hah, npm issue right now, which https://status.npmjs.org/ was quite tardy in reporting
Package Manager for Markdown
I'm working on a project that is intended to encourage folk to make markdown text files which can be bundled together in different bundles of text files using a package manager.
Question for coders; Which package manager would you suggest I use?
Main criterias (in order) are:
1. Easy for someone with basic command line skills to edit the file and update version numbers and add additional packages.
2. All being equal, more commonly and easy to setup is preferred.
#Markdown #CommonMark #PackageManager #Programming #Dev
#NPM #RubyGems #Cargo #PickingAMastodonInstance
#Ruby #Python #Rust #Javascript #NodeJs #Lisp #CommonGuide
#Infostealer campaign compromises 10 #npm packages, targets devs
@henry Having (almost fully) switched to #NodeJS in 2012, I quickly recognized the danger of relying to _anything_ (#npm included, this one gave me a lot of pain for several times over the years).
Ended up with a monstrous monorepo. Forked (and improved) just 2 other people's repos, one abandoned and one that took months to finally get it right regarding garbage collection, but I had no time to wait.
Thereby I never got to a situation to hate a programming language because of the hype around it, but it surely got me coding a ton of #javascript.
The experience helped me a lot in JS5=>ECMAScript and ECMAScript=>TypeScript switching in the last year or so.
New #npm attack poisons local packages with backdoors
https://www.bleepingcomputer.com/news/security/new-npm-attack-poisons-local-packages-with-backdoors/
#security vulnerability on #npm packages
https://www.reversinglabs.com/blog/malicious-npm-patch-delivers-reverse-shell
Malware found on NPM infecting local package with reverse shell
https://www.reversinglabs.com/blog/malicious-npm-patch-delivers-reverse-shell
Malware warning: A new npm attack targets the popular Ethereum library ethers, sneaking in a backdoor to take control of systems.
Read: https://hackread.com/npm-malware-infects-ethereum-library-with-backdoor/
@BleepingComputer Do we think something like this is enough to find if this garbage is present on a Linux system? `sudo find / -iregex '.*ethers-.*`
#node #npm #malware
#WebDev #JavaScript #TypeScript #frontend #npm
Meet dd<el> — JS lib for building #reactiveUIs with syntax close to native DOM!
See https://fosstodon.org/@jaandrle/114216488004115032 or https://github.com/jaandrle/deka-dom-el … share or use star if u like it
Express 5.1.0 is out!
v5 is now the default on 
New 
LTS timeline announced (including v4 EOL)
