shomp

Or, npm can add trust ratings to packages and versions. And Github the parent company can lend a tiny fraction of resources and programmer power to developing static code analysis tools for npm packages.

This problem is completely solvable in two different ways:

1) everyone uses private feeds that use vetted versions only, and

2) Github/npm take responsibility for every package published to npm as the distributor.

Also the name Shai-hulud was chosen by the people who made the malware, you shouldn't dignify them by using the name they chose.

Show me the source code

"without ever reaching for the crutch of punctuation" how delightful

I don't have access to the article, but isn't censorship in general bad?

Why resist tagging?

Be selective where you invest your ~finite energy :)

Which aspects

That does help but on the 4th of July I would prefer the American ;)

To me it reads like a demand: "Valve, open source the Steam Machine e-ink screen"

If we are talking past tense, "Valve have open-sourced.."

And if we are talking American "English," then "Valve has open-sourced..."

Care to fix this ungrammatical headline? :)

If Facebook, in light of the 2021 "Facebook Papers," believed the legislation inevitable, what kind of legislation would maximize its advantage?

Noteworthily, the legislation moves age verification from individual apps to app-store operators [Apple, Google] which reduces Facebooks legal exposure for inaccurate/incorrect age verifications.

Electric Clojure is a living example of hypermedia - instantaneous UI updates via differential. Client and server code co-exist in the same file, it really is a thing of beauty.

If Facebook knows your precise age they can market to you "better."

call and email your congresspeoples, and tell them not to go through with this

Where are the maps?