Ideas & society2022 · shared on Hacker News
What are Weak Links in the NPM Supply Chain? [pdf]
Explore What are Weak Links in the NPM Supply Chain? [pdf], its original source and Hacker News discussions. Discover community perspectives and save it to your reading list.
GO BEYOND THE ABSTRACT
The conversation around the idea.
Original Hacker News threads. Different perspectives, questions, and things worth thinking about.
Showing up to 100 related threads. A paper may appear in a comment rather than the original submission.
Links found in the discussion
Up to 50 recent source links, in HN item order.
Ylewisjoe ·
Node.js packages don't deserve trust
432 points345 comments
Yxena ·
There is no “software supply chain”
252 points210 comments
Yfagnerbrack ·
What are Weak Links in the NPM Supply Chain? [pdf]
1 points0 comments