What NPM should do to stop a new colors attack
I take issue with the title of this article. This was not an attack. The project&#x27;s author committed a change to his own open source project, which he had every right to do.<p>Was that an asshole move, and did he lose all credibility in the OSS community? Yes, absolutely. But it was not an attack.<p>In fact, I also take issue with GitHub &#x2F; Microsoft taking over the package and am very worried about the precedent that sets, regardless if their motives <i>this time</i> appear to be entirely selfless.