Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I was dumb enough to use https://unpkg.com/vue on my projects and now I have to deal with "Uncaught TypeError: Vue is not a constructor" this morning.


Folks shouldn't use unpkg.com.

The only relevant discussion you can find regarding a privacy policy is a twitter thread that ends with the developer saying "I really should discourage adoption because it's getting too big."

No dig on them, but, really... at some point we need to start doing a better job of owning this stuff.


Not sure I see the problem you’re talking about.

The issue was using an unversioned URL, which is a user error and has nothing to do with unpkg (other than allowing it)


I'm using https://cdn.jsdelivr.net/npm/vue@2.6.14 now


https://unpkg.com/vue@2.6.14/dist/vue.js?meta

https://developer.mozilla.org/en-US/docs/Web/Security/Subres...


Same here, I wonder how many apps around the world silently stopped working today.

It was my own fault for not self hosting or not pinning the version, but it was still a surprise!


Should unpkg have discouraged this and not offered unversioned urls at all?


Same here, this is how I found out about Vue 3

related: The mess we're in (a talk by Joe Armstrong)

https://www.youtube.com/watch?v=lKXe3HUG2l4

(yes, I know, I should have vendored the dependency in the first place)


Same here. I think I noticed within an hour or two because I checked, but can see other people being bitten on it.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: