Dev corrupts NPM libs 'colors' and 'faker' breaking thousands of apps

This page summarizes the projects mentioned and recommended in the original post on news.ycombinator.com

SurveyJS - Open-Source JSON Form Builder to Create Dynamic Forms Right in Your App
With SurveyJS form UI libraries, you can build and style forms in a fully-integrated drag & drop form builder, render them in your JS app, and store form submission data in any backend, inc. PHP, ASP.NET Core, and Node.js.
surveyjs.io
featured
InfluxDB - Power Real-Time Data Analytics at Scale
Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
www.influxdata.com
featured
  • shrinkpack

    Fast, resilient, reproducible builds with npm install.

  • Using a lockfile and checking in your dependency tarballs [1] can help insulate you from these problems until you're ready to face them.

    I created shrinkpack before left-pad and thankfully it meant that we were unaffected.

    A lot of developers, understandably, baulk at checking in dependencies, but there is a concrete benefit in being able to continue uninterrupted during outages.

    [1] https://github.com/JamieMason/shrinkpack

  • web

    Grow Open Source (by gitcoinco)

  • The fundamental issue here is that open source software is a [public good](https://en.wikipedia.org/wiki/Public_good_(economics)). So the paradox which everyone asks themselves is "if everyone can benefit from it for free why should I have to pay?".

    But conversely, if people are benefitting from something you've created then it's only fair for the person who created this value to get some financial compensation commensurate to the value they've created.

    The author of this package has chosen a method to get some compensation for their work that has resulted in a lose-lose situation where neither the author nor the users are happy.

    But it doesn't have to be this way.

    The [Opensource guide](https://opensource.guide/) has some useful tips on [Getting Paid for Open Source Work](https://opensource.guide/getting-paid/). For people interested in web3 and crypto, [Gitcoin](https://gitcoin.co/) is platform where you can [get paid to work on open source software](https://gitcoin.co/grants/).

    Hopefully, by becoming more informed on ways to make money from open source software we can avoid situations like this in the future and create a fairer system that works for everyone.

  • SurveyJS

    Open-Source JSON Form Builder to Create Dynamic Forms Right in Your App. With SurveyJS form UI libraries, you can build and style forms in a fully-integrated drag & drop form builder, render them in your JS app, and store form submission data in any backend, inc. PHP, ASP.NET Core, and Node.js.

    SurveyJS logo
  • faker

    Generate massive amounts of fake data in the browser and node.js (by faker-js)

  • rushstack

    Monorepo for tools developed by the Rush Stack community

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts

  • Lerna is Officially Dead. Long Live Monorepos

    3 projects | /r/javascript | 5 May 2022
  • JavaScript Monorepo Tooling

    7 projects | dev.to | 13 Feb 2021
  • Nrr: Minimal, fast NPM scripts runner

    1 project | news.ycombinator.com | 25 Apr 2024
  • Pnpm 9

    1 project | news.ycombinator.com | 18 Apr 2024
  • Manage project dependencies correctly

    1 project | dev.to | 13 Apr 2024