Hacker News Reader

Curious if we included package managers from operating system distros (example: Debian apt), in your experience, what do you suggest JavaScript/Python/Rust package managers learn / borrow from?

Part of me wonders if the reason we see more npm attacks than pypi attacks is malware authors not wanting to deal with python packaging either

Hilarious but would they not abuse LLMs for this if so?

Thanks to uv, all is forgiven.