Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

colors dependency has been purposefully destroyed by developer; crashes grunt; #36

Open
bwcp opened this issue Jan 10, 2022 · 1 comment

Comments

@bwcp
Copy link

bwcp commented Jan 10, 2022

Developer Marek Squire has purposefully ruined the colors library which causes the grunt and grunt-bower-task libraries (and probably others) to spams and crash the console when ran, thus preventing grunt from being used, at least when tagging "latest", which is what I do.

News article:
https://www.theverge.com/2022/1/9/22874949/developer-corrupts-open-source-libraries-projects-affected
Repo link:
Marak/colors.js#285

There is 3 solutions to this problem as I understand:

  1. Switch from colors to using chalk library, which I think some PRs exist already?
  2. Downgrade by tagging an older version of colors, and using it, before the broken version was created (latest)
  3. Switch to a fork of colors that is maintained by a more trustworthy individual. The colors community has already landed on a new maintainer of the code, a developer of colors who has decided to continue the work. I'd probably suggest going down this route:
    https://www.npmjs.com/package/@dabh/colors
    https://github.com/DABH/colors.js.
@bwcp
Copy link
Author

bwcp commented Jan 10, 2022

I've left a similar issue on this page yatskevich/grunt-bower-task#187

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant