What NPM should do to stop a new colors attack
I take issue with the title of this article. This was not an attack. The project's author committed a change to his own open source project, which he had every right to do.Was that an asshole move, and did he lose all credibility in the OSS community? Yes, absolutely. But it was not an attack.In fact, I also take issue with GitHub / Microsoft taking over the package and am very worried about the precedent that sets, regardless if their motives this time appear to be entirely selfless.