@lrvick When will you deploy the malware? :blobfoxsipglare:

@lrvick So basically there are no signature checks on packages on npm?

Why am I not surprised?

@lrvick@mastodon.social foreach sounds like a package that you shouldnt need with Array.prototype.forEach ​:blobfoxthonking:​

@lrvick Do any Fossil Fuel companies use ForEach or any of its dependent packages, I wonder?

@lrvick I see, those #package #managers are real #enablers.

@lrvick It seems that the (in)famous is-equal has a developer dependency to it 😁

@lrvick NPM was a mistake.

@lrvick I wonder if anyone ever tried monetization...ya know, show a popup ad everytime someone enters a foreach section.

@lrvick
Remeber: with great power comes great responsibility.

@lrvick i think you should do something terrible with this

@lrvick
🤦🤦

@lrvick congrats

also, explored it & very quickly went from "why does js even need a foreach package" to "oh, it's only 21 lines" :)

@lrvick if the email wasn't public it'll help a bit. I tend to register to various platforms with my private email address and share public one with everybody else unfortunately many platforms leak your email somewhere.

@lrvick I honestly consider this essential activism.

@lrvick make it print a rickroll to console everytime a function from the package is called

@lrvick Sounds almost like gaining ops on a chat room from an #irc netsplit.

@lrvick What are you gonna use it for?

@lrvick that could be quite the botnet you can make with that...

@lrvick foreach is a separate module??? a standard part of any other programming language .. smh. yeah, and thats why node is not installed globally on any of my systems.

@lrvick https://xkcd.com/2347/

@lrvick You know what, this is why I'm not against what Github did with enforcing 2FA for large project owners.

@lrvick
Since this toots make the round on fediverse:

npm ls foreach

will tell you whether the current repository has a dependency (direct or transient) to foreach.