Baldur Bjarnason on Nostr: “The mysterious supply chain concern of string-width-cjs npm package | Snyk” ...

“The mysterious supply chain concern of string-width-cjs npm package | Snyk”

https://snyk.io/blog/supply-chain-string-width-cjs-npm/

> It is my assumption that all of these dependent packages and download boosts are leading to the sole purpose of creating false legitimacy for the 3 *-cjs package

Fun fun fun.