How one developer just broke Node, Babel and thousands of projects in 11 lines of JavaScript

[czc]

Sounds crazy how something like this can affect so many people/projects. Kinda makes it like the wild wild web.

http://www.theregister.co.uk/2016/03/23/npm_left_pad_chaos/?mt=1458733182820

 

[Crzwaco]

Ouch is that why stuff went haywire last night.

 

[bradbear117]

So all these games are being developed online with "strings attached' to code that is only accessable online??

Here I thought all software and code was stored locally.

 

[FarligOpptreden]

So all these games are being developed online with "strings attached' to code that is only accessable online??

Here I thought all software and code was stored locally.

It all depends. NPM is a dependency manager for Node.js projects. It grabs the latest online version of the code when you compile and refresh dependencies, except if JavaScript is referenced client side, where it loads it the moment a browser requests it.

There are many dependency managers for all languages, including Gradle, Maven and Nuget. NPM just happens to be the most popular one used for Node.js.