Hacker News new | ask | show | jobs
by tiagozip 380 days ago
you can compare the hashes of the wasm lmao the build script is very much public
1 comments

It's not a good practice to commit binary blobs in a repository. And I don't think it would be difficult to add a prepublish step to your npm packages so that you can remove them. The end user shouldn't need to run the build script and compare hashes whenever the source code changes.

Very surprised to get pushback on what I thought was an industry standard lmao

feel free to make a pr to add a worker, currently not my first priority tho