> This response annoys me, because it's essentially victim-blaming.
No. The victim is the end-user who suffered from the production outage. jguimont is a professional who has an obligation to his clients.
Adopting a third-party tool or library does not absolve you of the responsibilities that you have to your users. You choose your tools and your libraries.
Both npm and jguimont screwed up here. Mistakes happen, and I certainly wouldn't judge anyone harshly for the occasional learning experience. But, the first step to learning from your mistake is admitting that you made one. jguimont has done that, and I respect him for it.
No. The victim is the end-user who suffered from the production outage. jguimont is a professional who has an obligation to his clients.
Adopting a third-party tool or library does not absolve you of the responsibilities that you have to your users. You choose your tools and your libraries.
Both npm and jguimont screwed up here. Mistakes happen, and I certainly wouldn't judge anyone harshly for the occasional learning experience. But, the first step to learning from your mistake is admitting that you made one. jguimont has done that, and I respect him for it.