Wes Todd

Results 917 comments of Wes Todd

> I think the fundamental problem is that an assertion by a maintainer of A is really an assertion that their current paths to a vulnerability are safe - not...

I do have a specific use case. I have an npm registry proxy, it caches the packuments and for now is re-writing the tarball urls before it writes them to...

> This is not all my comments yet, as it seems when you force push and i was in the middle of the review, all my pending comments are erased......

> How does this interact with a http HEAD request, by the way? Great question, and one I did not test or think of. Now that you say it, I...

> I assume that a transform could change the Content-Type and other aspects Yeah, it could for sure do that. With your idea above of a fs wrapper I think...

> If so, I can show you a solution that does all of that very easily without this functionality even being necessary. Yes, but remember I currently have `serve-static` in...

Actually, without support here, wouldn't that just move all of the complexity we are discussing into that layer? I guess that might also not be a perfect solution.

I added you on the private repo where I am working on this. One thing to remember, I took up this PR because it was existing work and it also...

Also an aside, this is where having a good real time chat for the team would be nice 😄. Slack even has pretty decent video chat and screen share.

Yeah I agree completely that if it is hard to use in practice it is not worth landing. My point above is that "what is use in practice"? Because that...