develwoutacause’s avatardevelwoutacause’s Twitter Archive—№ 1,338

  1. So apparently #NPM docs directly tell you to *check in* your NPM token. The motivation is for "using private packages", but this is *so easily misused* for new devs who could accidentally use a publish token. @npmjs you seriously need to fix this. 👇 docs.npmjs.com/using-private-packages-in-a-ci-cd-workflow#create-and-check-in-a-project-specific-npmrc-file
    A screenshot of NPM docs with two steps: 1. "In the root directory of your project, create a custom `.npmrc` file with the following contents: " - Lists an NPM URL with an authentication token explicitly set. 2. Check in the `.npmrc` file. The authentication token and "Check in the `.npmrc` file" are highlighted to indicate their incongruity.
    On twitter.com Twitter logo develwoutacause’s avatar Mood -2 🙁
    1. …in reply to @develwoutacause
      ANNNNND I just looked at my timeline to realize that there's a lot more important stuff going on right now in the US. 😨 I can only offer sympathy and support for every women out there. This is not ok, and we can't let it stand. Abortion rights are human rights.
      Permalink On twitter.com Twitter logo develwoutacause’s avatar Mood +5 🙂