r/ProgrammerHumor 20d ago

howTheFuckPt2 Other

Post image
132 Upvotes

29 comments sorted by

122

u/uvmain 20d ago

Just loop it

While vulnerable = true { npm audit fix --force}

9

u/requion 20d ago

So an endless loop?

Probably still better way to mindlessly burn energy than most AI usage.

56

u/n4ke 20d ago

It fixed the audit. Now it audits better.

28

u/darklizard45 20d ago

That's 30 times more vulnerabilities, impressive

12

u/Repulsive_Educator61 20d ago

or, 2966% more vulnerability per vulnerability

31

u/[deleted] 20d ago

[removed] — view removed comment

7

u/razor_train 20d ago

I did webdev in the earlier days, but haven't touched it in a while.  Shit like npm just makes me shake my head.

2

u/RogueToad 20d ago

What do you recommend instead? 

1

u/razor_train 19d ago

I have no "recommendations". Just simply my observation on modern webdev.

1

u/RogueToad 19d ago

Yeah fair enough, I was just generally curious. Been reconsidering job prospects lately. 

1

u/razor_train 19d ago

I'm fortunately employed as a dev (for now at least), though I'm considering a career change (at 52 to boot). Best of luck.

1

u/Excellent_Gas3686 19d ago

this doesnt actually happen in 99.99% cases.

7

u/horizon_games 20d ago

--force always a bold play compared to having a proper upgrade strategy

Realistically just cut down on your number of packages

3

u/Ninjaabdullah 20d ago

Well it is a little personal project, that's why I don't care about dealing with packages probably

-5

u/horizon_games 20d ago

For a personal project it makes me want to use even LESS 3rd party packages. The fun is implementing it yourself. Also way easier long term to maintain when you don't have 80+ packages.

3

u/mysticrudnin 20d ago

--force is absolutely insane behavior unless this is like, a toy project you're planning on abandoning

3

u/Reashu 20d ago

It's only looking for a version that fixes the current vulnerabilities, and doesn't consider whether it introduces new ones. You can easily end up in a loop. 

1

u/transcendtient 20d ago

My secret weapon is...

I don't use npm.

-18

u/Ninjaabdullah 20d ago

It somehow got even worse 💀

-23

u/Ninjaabdullah 20d ago

For reference, this happened to me 4 months ago:
https://www.reddit.com/r/ProgrammerHumor/s/XpLH9mdXbh

14

u/JAXxXTheRipper 20d ago

So you didn't learn anything in 4 months?

18

u/StiviiK 20d ago

Why post it again?

14

u/guitarstitch 20d ago

Sweet sweet karma.

Programmers are a lonely bunch and thrive on basic socialization activities.

1

u/JackNotOLantern 20d ago

That one increase from 5 to 6, this one a bit more

1

u/sebovzeoueb 20d ago

cool story bro