Wavesurfer.js: Cloned wavesurfer script on NPM
On NPM there is a package called wavesurfer which is a clone of wavesurfer.js – It is currently at version 1.3.4. (I took a quick look into the code to make sure it wasn't malicious – it appears to just be a simple clone, no manipulation was performed)
I propose we write to the author and kindly ask him to replace the package with a README pointing to wavesurfer.js and deprecate the package so people reference the maintained, official version.
mspae
All 7 comments
Oh. I'll write to them. Thanks!
katspaugh
on 20 Aug 2017
any news @katspaugh?
thijstriemstra
on 5 Sep 2017
Nope, no response. I'll ping the guy again.
katspaugh
on 3 Oct 2017
Thanks. For all we know it might even contain malicious code.
thijstriemstra
on 3 Oct 2017
The owner has just responded – he meant well and is working on deprecating the package.
katspaugh
on 3 Oct 2017
I suppose we're talking about this one: https://www.npmjs.com/package/wavesurfer
That sucks.
thijstriemstra
on 13 Oct 2017
Any way we can contact npm to let them know this is an old package and should be alias of wavesurfer.js?
thijstriemstra
on 24 Jan 2018
Related issues
Mamadou99
·
3Comments
matixmatix
·
5Comments
X-Raym
·
5Comments
pyros-endgame
·
4Comments
SGDAT
·
3Comments
Most helpful comment
The owner has just responded – he meant well and is working on deprecating the package.