You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
gulp-imagemin starting from 8.0.0 is ESM only, you can't use require.
Author of gulp-imagemin@sindresorhus doesn't look healthy: he tries to force ESM and nobody know why. It looks like youthful maximalism or some illness.
Please remove all usage of gulp-imagemin.
The text was updated successfully, but these errors were encountered:
@sindresorhus writes 10-50 lines of code and creates a package
he repeats this procedure 1500 times and creates about 1500 packages in npm.
popularity is growing in next 5 years.
he plants malicious code in every package.
there is no mechanism in npm that may reset popularity immediately.
developers will suffer until popularity will be dropped to zero.
We should report this situation as a bug in npm itself: it should handle a sensitive negative rating that affects search ranking and provide review section.
PS Current malicious code in 1500 packages is dangerous. Packages provides just small utilities and developer may use them in small scripts outside of main projects tests coverage. Developer will think that "this package is too small, it can't provide any harm for me", he will upgrade it to latest major version and nothing will happen. ERR_REQUIRE_ESM will appear in runtime only (for example in production).
Hello, your example is not working anymore:
gulp-imagemin
starting from8.0.0
is ESM only, you can't userequire
.Author of
gulp-imagemin
@sindresorhus doesn't look healthy: he tries to force ESM and nobody know why. It looks like youthful maximalism or some illness.Please remove all usage of
gulp-imagemin
.The text was updated successfully, but these errors were encountered: