Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

that's why I complained about it in the PR, mmm, I thought it was grossly unprofessional of him (besides the things he said in the discussion.

e.g. Tech changes all the time, that isn't an excuse to be a dick. e.g. ok dude, don't expect any future free work from me in the future on any of your projects going forward. Rude AF.)

also, I just realised, that PR is an excuse to get the library he made (https://github.com/quantizor/markdown-to-jsx) used within TailwindCSS :p





Stray thought: adding a library the PR submitter controls would be a good starting point for an XZ/SSH-style supply chain attack: badger & threaten the maintainers to add the dependency, and then sneak something into a future library update.

This seems like a huge red flag, there is no need to add any more dependencies to an already fully featured repo



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: