[codegeek]

"Earlier today, a former Chef employee removed several Ruby Gems, impacting production systems for a number of our customers."

So the developer already had left the company but one of his own Open Source code hosted on his personal github was used in production by Chef Customers ? Really ? That is just Wow. I don't have any strong opinions on whether he did the right thing but this absolutely surprises me. Running a small company, I am very strict against any of us using any personal accounts for anything that impacts our company work especially production. This has to be a no no by default I would assume.

[WrtCdEvrydy]

Remember leftpad?

[CaptainJustin]

For those interested see: How one developer just broke Node, Babel and thousands of projects in 11 lines of JavaScript

https://www.theregister.co.uk/2016/03/23/npm_left_pad_chaos/

[codegeek]

Yes and even though they are similar but I would still argue that npm hellhole is quite different than a direct github library being used by a company in production.