Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×
Open Source Businesses Programming The Almighty Buck

Standard, a Javascript Style Guide Library With 3M Downloads Per Month, Now Showing Ads When Installed Via NPM 82

Standard, a popular Javascript style guide library that is downloaded about three million times each month, is beginning to show ads when installed through npm, a developer announced this week. The move, which has been pegged as an experiment, comes as the developer looks to find sustainable ways to support contributions to the open source development. In a post, Feross Aboukhadijeh, a developer of Standard, said whenever Standard 14 is installed, "we'll display a message from a company that supports open source. The sponsorship pays directly for maintainer time. That is, writing new features, fixing bugs, answering user questions, and improving documentation."

The announcement has sparked a debate in the community with some suggesting that there should be a better way to support the FOSS developers without seeing ads on the terminal.
This discussion has been archived. No new comments can be posted.

Standard, a Javascript Style Guide Library With 3M Downloads Per Month, Now Showing Ads When Installed Via NPM

Comments Filter:
  • by phantomfive ( 622387 ) on Sunday August 25, 2019 @02:30PM (#59123326) Journal
    This is exactly the quality I have come to expect from the NPM/Node community.
    • by hjf ( 703092 ) on Sunday August 25, 2019 @02:38PM (#59123334) Homepage

      you get what you pay for.

      • by Jason1729 ( 561790 ) on Sunday August 25, 2019 @03:32PM (#59123436)
        I came here pretty much wanting to say this is why I'd take the paid option in a heartbeat, not just in this case but in general.

        The problem is that these days most paid options are more ad-infested than free options.

        I am getting so fed up with the entire tech industry.
      • What a stupid saying; if you have two free options, one that sucks and one that doesn't, it is equally true for each.

        And so totally irrelevant. Low price is meaningless to making a choice.

        If somebody sells you something at an inflated price, you paid that price and got that thing. Somebody else paid less for something better. Both of you "got what you paid for."

        All it means is that the thing was delivered, it tells you nothing about the choices and their utility for some use case.

        It is just philosophy for p

    • I remember warning about this problem in webdev in the pubmeet after a conference and I was laughed out of the establishment. Who's laughing now?
  • Do not install through npm (whatever the heck that is).

    • Re: (Score:3, Insightful)

      npm is by far the largest repository of javascript (specifically nodejs) packages—so much so that it's as though no alternatives exist. (I sure can't think of any.) You might as well advise an iPhone user not to install apps through the App Store or a Linux user not to use their distro's package manager. Avoiding npm isn't an option.
      • The alternative is to use a few libraries that can be downloaded separately (they're basically all on Github), and then write the rest of them yourself. There is a LOT of noise in Javascript, and most websites can be built using raw HTML/CSS/Javascript on the frontend these days. Unless your website is a heavy web application, it doesn't need React/Angular/Vue, all the functionality of JQuery has been absorbed by Javascript already, so you don't really get a lot of benefit from NPM.

        (Of course, I don't do
        • by BuGless ( 31232 )

          This is close to my own solution, which is going frameworkless (no jquery, no react, etc.), but still use npm, but only pick packages that have *zero* dependencies (one way to find them is to look for the tag "zerodeps").

          Going about it this way avoids dependency-hell and sort of guarantees a baseline quality level. Because, let's face it, 99% of all packages on npm are not worthy of the term "library".
          Traditionally, a library has no dependencies, and involves *at least* a thousand lines of code (not counti

      • Except that if Apple pulled this, jailbreaking would become huge and people would find different app stores. If any linux distro pulled this, people would flee the distro.

        NPM iis only pulling this crap because they think they can get away with it. And the sad thing is, they probably can because too many people don't care.
        • by Dog-Cow ( 21281 )

          If Apple pulled this, it would be 3 months before anyone even noticed, and only the "blogosphere" would give a shit. Ads while the App Store app installed an app? Who the fuck cares? Who watches their phone while an app installs?

      • Avoiding npm isn't an option.

        Which is why I've been able to do development and never use it?

      • by znrt ( 2424692 )

        besides npm is just the default distribution channel, not the issue which is foss funding.

        package quality varies wildly but there is no doubt that the private industry has obtained huge value from the foss community ... basically for free, except for a few companies with various levels of partnership/sponsorship/service with a few repos that are strategic for them. vast majority of companies simply leech ... when they are not making arbitrary feature requests.

        anyway, ads on the commandline? no thanks, there

  • Ha! (Score:4, Funny)

    by 93 Escort Wagon ( 326346 ) on Sunday August 25, 2019 @02:43PM (#59123342)

    Lynx can’t save you from *these* JavaScript ads...

  • How does one block the adverts?

    • by Anonymous Coward

      It would be best to avoid the ads by not downloading this library, or any other from this developer.

      If you don't rely on the library, this shouldn't be an issue.

      If you do, now is the time to find a replacement since the dev is announcing publicly they have no interest in maintaining an open source project. It's just as likely to be taken down as made closed source and rented out as a service.
      Hopefully at least the second option will be available to give extra time to those not migrating away now before it

      • by wfj2fd ( 4643467 )
        If it's a downstream dependency of any library in the project, I'm assuming you'd see the ad. You don't have to be using it directly for you to be affected.
        • by Dog-Cow ( 21281 )

          It's an ad. Displayed on the command-line, during install. How many fucking times do you install the same package, and how many times do you watch the screen and read every line while doing so?

          You are getting worked up over nothing.

        • You don't have to be using it directly for you to be affected.

          If you're actually "affected" by this then you're really just a bit too sensitive for the real world.

      • If it is an open source project someone else should be able to branch the code from before this change and create a new project (relevant xkcd).
  • by account_deleted ( 4530225 ) on Sunday August 25, 2019 @02:56PM (#59123360)
    Comment removed based on user account deletion
    • by phantomfive ( 622387 ) on Sunday August 25, 2019 @03:12PM (#59123398) Journal

      core-js is used in 14k projects and gets 80 million downloads a month

      And you wouldn't hire him? He's obviously experienced, and you're hiring him to do programming, not marketing. Maybe you can find perfect people to hire......somewhere, but I'm happy to hire people who can get the job done.

    • The maintainer of core-js [github.com] decided to spam everyone with an ad for himself asking for a job. Of course by being so irresponsible it seems unlikely anyone would hire them.

      Why not? He's obviously a talented developer and has built software that is important and useful to many, many people. Plenty of projects have donation pages and even donation banners on npm install, what's wrong with that? Even if you have a problem with it npm and core-js are free software that has been given to you and you can change if you don't like it.

      It's a really sad state of affairs when people are getting all up in arms because "Oh no I saw an ad for a thing on a free software project!", seriously

  • Well... (Score:3, Informative)

    by sajavete ( 5054387 ) on Sunday August 25, 2019 @02:58PM (#59123364)
    .. if it's only during when it gets installed/updated... I guess one can live with that. When else would you see an open-source supporting ad, right? "Delta Lloyd Insurance supports open-source, blah" in the console O(1) is way better than the constant "Grammarly thinks it can write better than you"-insults on YT.
    • Get an adblocker, you won't regret it. No more grammarly ads.
    • by Anonymous Coward

      The problem is that this is just the beginning. Soon other maintainers decide to do the same.
      A React project starts with more than 800 dependencies, so imagine how fun would be watching 800 ads scroll by.
      And then, as people can't see them anymore among the flood, authors will put bigger ads, with ASCII text, or even worse, a sleep() call to make sure you read it.
      No, we can't allow this. That's not the place for it.
      I really hope NPM bans the practice and removes all the offending versions.

      • by Dog-Cow ( 21281 )

        Oh the horrors! Ads scrolling by! !!!!!!111eleventy!!!!!111

        Get over yourself, you retard. Maybe next time you install, you can just do something productive with your time, like post complaints to slashdot. Then you won't have to see those dreaded ads.

        • Comment removed based on user account deletion
          • by tlhIngan ( 30335 )

            Logs are used to convey important info. If see a log with 150 short messages like "installing a", "installing b", "installing c" etc one per line it's easy at a glance to know it's ignorable. As soon as something larger gets printed out now it requires my attention because more often than not it's something important. Now someone inserts an ad I can no longer do that. I have poor over their message every time. They've just made my job harder. And it's not just me. Most devs know this so now millions devs ha

          • They've just made my job harder.

            Such an entitlist. Stop using those tools, you're only using them because they made your job easier in the first place so write and maintain alternatives yourself. You don't even have to do it from scratch because those tools are all free software.

    • way better than the constant "Grammarly thinks it can write better than you"-insults on YT.

      The sad fact is that Grammarly does catch a lot of style and and formatting errors. It gets a lot of stuff wrong, too, but I'd be a liar if I said it wasn't a useful tool for basic editing and proofing.

      I've no doubt whatsoever that Grammarly does, in fact, write better than a lot of people.

      The Hemingway Editor (hemingwayapp.com) is also useful but it's geared more towards clarity and succinctness.

      With that said, get an adblocker and free yourself from the relentless tyranny of the Advertising Mafia.

    • I guess one can live with that.

      One can, but thankfully many others will blacklist him and it will serve as an example to others.

      • Re: (Score:2, Flamebait)

        by Dog-Cow ( 21281 )

        Because nothing says "I want Open Source to disappear so I have to pay for every bit of software I can't write" better than getting pissed off about an ad displayed during install.

        You entitled shit piles really need to find some drugs to overdose on. You aren't useful for anything more than fertilizer.

        • Child, you're not powerful enough to make open source disappear.

          It didn't come from you.

          It wasn't written by your whim, or at your pleasure.

          Nobody is going to stop writing code because you called them names on the internet.

          You don't even know enough about those "computer" things to realize that there is a glut of open source software, not some shortage. Whoever the needy developer is, he could just go away and get a job since he cares so much about income, and then others from the long long line of people w

  • by spongman ( 182339 ) on Sunday August 25, 2019 @02:59PM (#59123366)

    Hopefully this will kill the mid-named âoeStandardâ project for good.

    • mid-named âoeStandardâ

      Whatever it is you're talking about, it is definitely mid-named. The back half of the middle, too.

  • I know this is a sensitive topic: ads are bad, and placing them anywhere where they haven't been is opening an avenue for them hampering usability going forwards. But let's be crystal clear here: this is a message that pops ON INSTALL, in a freaking CLI, as text (as opposed to a super visually-polluting colorful JPG or an even worse auto-play video). This is to support 1 (ONE) maintainer so that he can provide some quality to the software (which is still FOSS, isn't it?), and most of all, you're still allow

    • Broadly speaking, people - especially the kind on slashdot - don't like it when applications connect to the internet and do things you didn't ask it to do or are not considered necessary for standard operation.

      • by Dog-Cow ( 21281 )

        Oh! Fucking! No! An installer which connects to the Internet to download stuff connected to the Internet!!!!

        Get over yourself.

    • The thing about ads and the internet is that ads are the one effective way to essentially get a penny from each user.

      Way back in the day I wrote some software. It was fully functional for free. At the time, PayPal was paying $5 for referrals, so the software had a button to click so you could either a) donate $5 or b) donate for free by signing up for PayPal.

      A hundred thousand people used it. ONE person donated. One person out of a hundred thousand. A hundred people emailed asking for additional

      • The best proposal (assuming it is closed source) is just to sell the software. If you sold your software for $5, you probably would have sold 10,000 (out of those 100,000 users) and cleared $50,000. You would be surprised at how much money you can make selling $5 software.

      • by Anonymous Coward

        People will complain about being nickel-and-dimed and people will complain about even having to even just see ads. Such people get all smug about how clever they are using adblockers to cut off revenue streams like this but it just means you end up with developers flocking to walled-gardens like the Apple ecosystem and putting content behind paywalls. The vast majority of the paid developers in open source are employed by corporations and people then wonder how we end up with things like systemd, corporatio

  • Oh come one- it shows a single ad when you install it, so what?

    I'm willing to live with that. Seriously, if you can't one single ad from the developer upon install, then you need to step back for a moment and take a chill pill.

    • by JazzXP ( 770338 )
      Think of it this way. Imagine 50 of your libraries have ads (may not be direct dependencies, but dependencies of dependencies), now you are having issues building on your CI server. Imagine going through those log files trying to work out what's going wrong.
      • by Dog-Cow ( 21281 )

        Your build service doesn't provide colorized logs? Maybe you should pay for a real service, instead of some shit open source that couldn't afford to write something good.

        • Your build service doesn't provide colorized logs? Maybe you should pay for a real service, instead of some shit open source that couldn't afford to write something good.

          Ah, I see you too have used Jenkins.Your build service doesn't provide colorized logs? Maybe you should pay for a real service, instead of some shit open source that couldn't afford to write something good.

          • Ah, I see you too have used Jenkins.

            Lol, the devs at my previous office used Jenkins, or rather they tried to use Jenkins.

            Maybe they weren't holding it right or whatever, but Jenkins broke shit so often and so reliably that they had a standing 0900 meeting to cover stuff like "what Jenkins did/didn't do last night".

            I was lucky to have nothing to do with Jenkins but it was the source of much anxiety and cursing and everyone hated it. I can't remember what they moved to (Gitlab CI, maybe?), but the 0900 meeting quickly became a snoozy coffee kl

      • Think of it this way: imagine if 50 of those libraries became unmaintained and you had to start finding alternatives because the developers had day jobs.

  • Please keep the penis enlargement spam out of my terminal window (this is what it will eventually devolve into)

  • 1. Each package should be limited to one line of ad space including the text and a link to the sponsor.
    2. The ads should all show up in a standard place in the install such as the beginning or end of the install with a delimiter identifying ad start
    3. There should be a switch to disable the ads from showing during install
  • That's an ancient basic rule of software developmen.
    Ignore it at your own risk.
    QED.

    • by KlomDark ( 6370 )

      No shit, npm is a giant nightmare apparently for punk kids that have no idea what they are doing. But eventually it will all fall apart. I avoid that shit like the plague.

  • Ibid

BLISS is ignorance.

Working...