The massive bug at the heart of npm
JS Party: JavaScript, CSS, Web Development
00:00
The Importance of Data Validation
Saki: There's just so much undocumented behavior and undocumented APIs with the MPM registry, which unfortunately has been the case for quite a while. And we've as a community really had to leverage the clients themselves and folks that have you know, paved paths to to playing with the registry in some way. So I tip my hat to the team behind Verdachio. They did a lot of work to sort of backwards engineer and build a proxy registry implementation. A lot of these products also help you write policies and enforce policies on consumption of your upstream packages. Saki: All the things that in theory should be built into the NPM registry could do very profitable business if they were done
Transcript
Play full episode
