Michael Bridgen

The script `@jaxxstorm/pulumi-action-config/workflow` imports itself. I absolutely agree it shouldn't segfault though! I can reproduce this with: ``` // foo.js import * as f from 'foo'; ``` I thought we...

Is this a convenience for ``` const user = std.param.String('user', undefined); if (user === undefined) { throw new Error('parameter "user" required but not supplied'); } ```

> * [ ] Retrofit a design doc Looking forward to this :-) > * [ ] Support downloading the plugin description and the plugin binaries from http URLs I...

Yes I think so. If it can be written as, or compiled to, pure JavaScript, it could just be a module to be called with (say), ``` jk run -m...

Implementation notes: - it's easy to get terser to generate a source map for you, and it'll be included in the baked-in assets - but: V8 won't use it by...

CSV (tab-SV, etc.) can be more complicated than it seems, with quoting and so on. It may be worth building this in (go has `encoding/csv`), perhaps as an RPC if...

More thoughts: - if a downloaded package has a package.json, jk should probably try to respect it (packages won't have package-lock.json, because `npm publish` doesn't include them) - will this...

What's the er, attack you have in mind?

Well that's module resolution, rather than reads, but same sort of thing. I see what is happening, what I want to understand is how someone could (maliciously) use it to...

This would probably need to default to YAMLStream, and take a flag which forces it to a particular format. curl -L https://raw.github.com/some/random/kubernetes.yaml | jk validate --format yamls ./ok.js -