undefined | Better HN

0 pointslifthrasiir1y ago0 comments

How can you be that sure? :-) It is not even like that Maven repositories don't suffer from malicious packages with confusing names (for example, [1])...

[1] https://github.com/spring-projects/spring-ai/issues/537

0 comments

simon_o1y ago

That seems to be an absolute win to be honest. Not sure how you think this is helping your case.

Maven Central people nuked the artifact that may have caused confusion, and if the owners try anything like that again, it's likely their domain will be banned from publishing.

lifthrasiirOP1y ago

Yes, but that's not unique to Maven because virtually all software repositories have such policies. If that's about the required amount of "moderation" you claim, I don't see how Maven can even be considered better than others.

simon_o1y ago

Or maybe you don't want to.

If that's the hill you want to die on, good luck.

1 more reply

j / k navigate · click thread line to collapse

0 pointslifthrasiir1y ago0 comments

How can you be that sure? :-) It is not even like that Maven repositories don't suffer from malicious packages with confusing names (for example, [1])...

[1] https://github.com/spring-projects/spring-ai/issues/537

0 comments

simon_o1y ago

That seems to be an absolute win to be honest. Not sure how you think this is helping your case.

Maven Central people nuked the artifact that may have caused confusion, and if the owners try anything like that again, it's likely their domain will be banned from publishing.

lifthrasiirOP1y ago

simon_o1y ago

Or maybe you don't want to.

If that's the hill you want to die on, good luck.

1 more reply

j / k navigate · click thread line to collapse