←back to thread

NPM debug and chalk packages compromised

(www.aikido.dev)
1369 points universesquid | 2 comments | 08 Sep 25 15:37 UTC | HN request time: 0s | source
Show context
tomxor ◴[08 Sep 25 17:06 UTC] No.45170819[source]▶
Finally validated for writing my own damn ANSI escape codes.
replies(1): >>45173233 #
jmull ◴[08 Sep 25 20:04 UTC] No.45173233[source]▶
Yeah, I get that learning the codes is a little annoying, but not actually harder than finding, incorporating, and learning one of the APIs here. Also one is standard while the other is not. Seems a bit nuts to use a package for this.
replies(2): >>45173971 #>>45184261 #
junon ◴[08 Sep 25 21:04 UTC] No.45173971[source]▶
Hi, missing a lot of history here. When Chalk was written, colors in the terminal wasn't a flashy thing people tried to do very often, at least not in the JS world. Coming from browsers and wanting to make CLI apps using the flashy new Node.js 0.10/0.12 at the time saw a lot of designers and other aesthetically-oriented folks with it. Chalk filled a hole for people to do that without needing to understand how TTYs worked.

Node.js proper has floated the idea of including chalk into the standard libraries, FWIW.

replies(2): >>45176413 #>>45181074 #
1. jmull ◴[09 Sep 25 12:32 UTC] No.45181074[source]▶
I doubt we'll ever see eye-to-eye on this. Some people try to think about how to write less code, and some people try to think about how to write more code.
replies(1): >>45184079 #
2. junon ◴[09 Sep 25 16:10 UTC] No.45184079[source]▶
We probably don't disagree, to be honest. Some of these packages shouldn't exist, I'll be the first to say it.