develwoutacause’s avatardevelwoutacause’s Twitter Archive—№ 1,339

    1. So apparently #NPM docs directly tell you to *check in* your NPM token. The motivation is for "using private packages", but this is *so easily misused* for new devs who could accidentally use a publish token. @npmjs you seriously need to fix this. 👇 docs.npmjs.com/using-private-packages-in-a-ci-cd-workflow#create-and-check-in-a-project-specific-npmrc-file
      A screenshot of NPM docs with two steps:
1. "In the root directory of your project, create a custom `.npmrc` file with the following contents: " - Lists an NPM URL with an authentication token explicitly set.
2. Check in the `.npmrc` file.

The authentication token and "Check in the `.npmrc` file" are highlighted to indicate their incongruity.
  1. …in reply to @develwoutacause
    ANNNNND I just looked at my timeline to realize that there's a lot more important stuff going on right now in the US. 😨 I can only offer sympathy and support for every women out there. This is not ok, and we can't let it stand. Abortion rights are human rights.