HNGlance

Top Best New Show

chokidar-cli package hijacking pending?

https://github.com/open-npm-tools/chokidar-clis/blob/main/poc.html

by dwoldrich • 11 months ago

2 2 11 months ago

GI

Related Stories

Loading related stories...

Comments

2

dwoldrich2• 11 months ago

Friendly reminder to pin all the versions and then let GitHub Dependabot, ActiveState or Synk tell you when you should upgrade.

dwoldrich2• 11 months ago

According to https://www.npmjs.com/package/chokidar-cli, current version is 3.0.0, last released 4 years ago, so should be good to pin that version and look for alternatives at your leisure.

https://github.com/open-npm-tools/chokidar-cli is the new listed homepage, which tipped me off there was a looming problem. It was created a week ago and has not yet released any new versions, but obviously the account has control over the package in NPM.

Source preview

github.com

HNGlance

© 2024-2026 HN Glance. Story content belongs to its original sources.

Privacy
Terms