AI-powered
podcast player
Listen to all your favourite podcasts with AI-powered features
3min chapter
The massive bug at the heart of npm (JS Party #282)
Changelog Master Feed
The Inconsistency of the MPMCLI API
The problem is the mismatch between like packet, local package, JSON and manifest. It's a code smile here in terms of the architecture because really you should be able to hydrate the state of most of that metadata by just reading from the local package,. Those are two critical pieces of information which actually can be falsified inside of a tar ball. And if somebody, a bad actor, finds this, they can sort of find a way as for us so elegantly we put it, hide malicious scripts, hide known malware... Do you want to jump in there at some point? I'm not sure for us I saw you start shaking your head. Yeah.
00:00
Transcript
Episode notes
Get the Snipd
podcast app
Unlock the knowledge in podcasts with the podcast player of the future.
AI-powered
Discover
highlights
Listen to the best highlights from the podcasts you love and dive into the full episode
Save any
moment
Hear something you like? Tap your headphones to save it with AI-generated key takeaways
Share
& Export
Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more
AI-powered
podcast player
Listen to all your favourite podcasts with AI-powered features
Discover
highlights
Listen to the best highlights from the podcasts you love and dive into the full episode