Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

v1.4.2 is broken #289

Closed
dhilt opened this issue Jan 9, 2022 · 19 comments
Closed

v1.4.2 is broken #289

dhilt opened this issue Jan 9, 2022 · 19 comments

Comments

@dhilt
Copy link

dhilt commented Jan 9, 2022

It was released 1 hour ago and broke my tests in the following nice (not) way:

Screenshot 2022-01-09 at 23 49 28

I fixed it in my lib by reverting package-lock.json: dhilt/ngx-ui-scroll@dd782fc (BTW it is suggested to downgrade to 1.4.0, thanks to @lirantal, so here's another downgrade commit)

I suppose it might relate to destruction of the Faker.js project (5 days ago): https://github.com/Marak/faker.js

@Hamahmi
Copy link

Hamahmi commented Jan 9, 2022

It is, check this commit 074a0f8

@floscher
Copy link

floscher commented Jan 9, 2022

See #285

@lirantal
Copy link

lirantal commented Jan 9, 2022

@dhilt please revert back to using 1.4.0 if you can to mitigate the issue.
Versions 1.4.1 and 1.4.2 would both introduce a denial of service upon usage.

@dhilt
Copy link
Author

dhilt commented Jan 9, 2022

@lirantal Thanks, will do!

jummy123 added a commit to traderjoe-xyz/rocket-joe that referenced this issue Jan 9, 2022
jummy123 added a commit to traderjoe-xyz/rocket-joe that referenced this issue Jan 9, 2022
@Apollon77
Copy link

Apollon77 commented Jan 9, 2022

@Marak Can you please kill 1.4.1 and 1.4.2 from npm and adjust latest back to 1.4.0 please ... It is breaking a lot!

mergify bot pushed a commit to aws/jsii that referenced this issue Jan 9, 2022
See Marak/colors.js#289.

---

By submitting this pull request, I confirm that my contribution is made under the terms of the [Apache 2.0 license].

[Apache 2.0 license]: https://www.apache.org/licenses/LICENSE-2.0
otaviomacedo added a commit to aws/jsii that referenced this issue Jan 9, 2022
See Marak/colors.js#289.

---

By submitting this pull request, I confirm that my contribution is made under the terms of the [Apache 2.0 license].

[Apache 2.0 license]: https://www.apache.org/licenses/LICENSE-2.0
@pxseu
Copy link

pxseu commented Jan 9, 2022

@Marak Can you please kill 1.4.1 and 1.4.2 from npm and adjust latest back to 1.4.0 please ... It is breaking a lot!

That's.... the point of why he has done that

@dustinlw1987
Copy link

Marak should NOT be trusted as a developer! Especially after doing this unilaterally without notification.

@DABH
Copy link
Contributor

DABH commented Jan 9, 2022

Please consider closing this issue so that people will go to #285 instead -- trying to keep solutions and updates in one place. Thanks.

@dustinlw1987
Copy link

@Marak Can you please kill 1.4.1 and 1.4.2 from npm and adjust latest back to 1.4.0 please ... It is breaking a lot!

That's.... the point of why he has done that

There is absolutely NO REASON to fuck over people this way! That's how you burn bridges and have people not trust you as an developer.

@pxseu
Copy link

pxseu commented Jan 9, 2022 via email

@dustinlw1987
Copy link

Sure, and that is EXACTLY what is happening. Marak is being cut out and deleted as nobody trusts him now.

@Apollon77
Copy link

In my eyes there are two sides right now:
1.) The present and how to fix the real issue ... ideally supporting him that he hopefully reverts latest on npm to 1.4.0
2.) Future: Then the affected libraries can think about movingg away or whatever

I'm interested rigt now in Point 1 ...

@shayneoneill
Copy link

"ideally supporting him"

Yeah, no. That would be deeply irresponsible. Not after this. Rewarding this sort of malicious behavior just leads to more of it.

@DevXiaolan
Copy link

Did it so

@rsadr0pyz
Copy link

npx marak-free

@karikera
Copy link

karikera commented Jan 10, 2022

v1.4.1 is also broken
v1.4.0 is working

@euberdeveloper
Copy link

Hi, in case the author will not maintain this project or fix this, I made a fork that restores the normal behaviour. I am not sure if I will maintain this package, but just in case the problem will not be solved and you don't want to be scared when running npm update...

https://github.com/euberdeveloper/colors.js

In any case I could also suggest passing to the chalk package, which is very good and has a serious and reliable author

@RIAEvangelist
Copy link

Here is an alternative, optionally, you could easily write your own module :

nozaki-colors https://github.com/RIAEvangelist/nozaki-colors

@TechStudent10
Copy link

@npm revert it to a working version.

@serenecloud
Copy link

@TechStudent11 looks like @npm have indeed reverted https://www.npmjs.com/package/colors to 1.4.0

@TechStudent10
Copy link

@TechStudent11 looks like @npm have indeed reverted https://www.npmjs.com/package/colors to 1.4.0

good

@dhilt
Copy link
Author

dhilt commented Jan 10, 2022

Great, closing this as npm has removed broken versions and reverted to 1.4.0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests