This is OK but a hello world app requires 203 modules and that's not really a safe position to start new apps.
https://github.com/ChALkeR/notes/blob/master/Do-not-underest...
In Show HN: Server.js – A modern Express alternativeChALkeR
notes
Security & Privacy2015–2022
ChALkeR / notes
notes
Some public notes
17Distinct people
21Mentions
0Explicit recommenders
1.3KGitHub stars
What to know before exploring
What it is
Some public notes
GitHub
Where it is used
No documented product use was verified in the last source check.
What people are saying
No recommendation phrase was found in the indexed comments.
No classified warning is attached to this page. Read the discussions before treating silence as approval.
Also in these discussions
No other repository is repeatedly linked in the same discussions.
This week on Hacker News
Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 7:56:55 PM UTC.
No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.
Mentions over time
HN mentions by year21 dated mentions
Observed mentions: 2015-12-04 14:31:50 UTC to 2022-05-05 19:33:38 UTC.
Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.
View mention counts and date ranges
| Period | Start (UTC) | End (exclusive, UTC) | Mentions | Submissions | Comments |
|---|---|---|---|---|---|
| 2015 | 2015-01-01 00:00:00 UTC | 2016-01-01 00:00:00 UTC | 2 | 2 | 0 |
| 2016 | 2016-01-01 00:00:00 UTC | 2017-01-01 00:00:00 UTC | 4 | 3 | 1 |
| 2017 | 2017-01-01 00:00:00 UTC | 2018-01-01 00:00:00 UTC | 13 | 10 | 3 |
| 2018 | 2018-01-01 00:00:00 UTC | 2019-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2019 | 2019-01-01 00:00:00 UTC | 2020-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2020 | 2020-01-01 00:00:00 UTC | 2021-01-01 00:00:00 UTC | 1 | 0 | 1 |
| 2021 | 2021-01-01 00:00:00 UTC | 2022-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2022 | 2022-01-01 00:00:00 UTC | 2023-01-01 00:00:00 UTC | 1 | 0 | 1 |
From the project README
An excerpt from the repository, fetched Nov 13, 2026.
Read the project’s introduction
Just some notes, stored on GitHub instead of a blog.
I am not a native English speaker, so please excuse any language mistakes.
Contents
Yarn transferred npm credentials over unencrypted http connection (2019-07-13)
Enumerating Bitbucket repos and private issue titles (2018-05-10)
On Node.js CTC decision making (part 1) (2017-05-05/2017-08-30)
Gathering weak npm credentials (2017-06-21)
Improper markup sanitization in popular software (2017-04-13)
Short-term package manager wishlist (2016-11-03)
On npmjs.com tokens visibility, XSS, and clickjacking (2016-10-18)
Stealing Travis secure variables (2016-07-07)
Let's fix Buffer API (2016-01-15)
Buffer knows everything (2016-01-14)
Do not underestimate credentials leaks (2015-12-04)
Read the full README on GitHubWhat Hacker News says
13 sourcesImproper markup sanitization in popular software
4 points · Open discussionAnd then this happens: https://github.com/ChALkeR/notes/blob/master/Improper-markup...
In Myspace lets you hijack any account just by knowing the person’s birthdayGathering weak npm credentials
3 points · Open discussionHow I obtained direct publish access to 13% of npm packages
55 points · Open discussionObtaining publish access to 13% of npm packages
14 points · Open discussionGathering weak npm credentials
12 points · Open discussionGathering weak npm credentials
4 points · Open discussionGathering weak npm credentials
5 points · Open discussionHow I obtained publish access to 13% of npm packages (including popular ones)
5 points · Open discussionGathering weak npm credentials
10 points · Open discussionGathering weak npm credentials
20 points · Open discussionAs for this vector, credentials leaks have been littered across the community and they've been aware since 2015. See
https://github.com/ChALkeR/notes/blob/master/Do-not-underest... for more information.
In The Great Suspender developer account hacked, extension pulled from Chrome Store