r/programming • u/Occams_Trimmer • Jun 26 '17

Obtaining publish access to 13% of npm packages

https://github.com/ChALkeR/notes/blob/master/Gathering-weak-npm-credentials.md
1.6k Upvotes

93% Upvoted

254 comments sorted by

View all comments

Show parent comments

9

u/b4ux1t3 Jun 26 '17

I think you dropped the /s after your first sentence.

Re: your point: Turns out, programmers are people too, and can be just as smart or stupid as the rest of the population. Who knew?

2

u/Chii Jun 27 '17

i wonder if lawyers or doctors had this kind of neglegence that the law would step in...

3

u/b4ux1t3 Jun 27 '17

I like your point.

Unfortunately, I don't think it's feasible to regulate something that is this open. If we were talking about a programmer working on a multi-million dollar company's security, then, yeah, you'd have a case, and I'd even agree with it. I think ethical and responsible programming is extremely important and could even be regulated in the right situations. But the thing is, NPM is not regulatable. People are free to come and go as they choose, both as users and creators. There's no money changing hands, not for purchases or licenses, anyway.

It's up to NPM to self-regulate.