GitHub Dramas

Collection of dramas on GitHub (and else where)

Last update: August 19, 2022

2022

EpicGames/Signup - Notification spam of 400k GitHub users due to tagging @EpicGames/developers on GitHub

June 3, 2022 | Notification spam

• Original PR: EpicGames/Signup#24
• HN discussion: https://news.ycombinator.com/item?id=31627061

vue-cli node-ipc - vue-cli dependency on node-ipc potentially overwrites user files

March 16, 2022 | Controversial | Politics

• Main issue on vue-cli to warn users about the impact: vuejs/vue-cli#7054
• Original issue (some comments deleted or edited by RIAEvangelist): https://github.com/RIAEvangelist/node-ipc/issues/233
  • Commit that contains overwite logic: https://github.com/RIAEvangelist/peacenotwar/blob/5b72bd82cae6f555983a2e04821a54027a774269/index.js#L16-L29
  • Repo for the overwrite code (protestware): https://github.com/RIAEvangelist/peacenotwar
• snyk vulnerability alert blogpost: https://snyk.io/blog/peacenotwar-malicious-npm-node-ipc-package-vulnerability/
• HN discussion: https://news.ycombinator.com/item?id=30717382

colors.js Zalgo - colors.js author Marak breaking colors.js intentionally

Jan 8, 2022 | Breaking

• Original issue (posted by author): Marak/colors.js#285
• Commit: https://github.com/Marak/colors.js/commit/074a0f8ed0c31c35d13d28632bd8a049ff136fb6#diff-92bbac9a308cd5fcf9db165841f2d90ce981baddcb2b1e26cfff170929af3bd1R18

faker.js emptied - faker.js author Marak emptying faker.js intentionally

Jan 5, 2022 | Breaking

• Empty repo: https://github.com/Marak/faker.js
• Community org faker-js fork: https://github.com/faker-js/faker.js
• Marak's GitHub account suspended after he erased his faker project: https://twitter.com/marak/status/1479200803948830724
  • HN discussion: https://news.ycombinator.com/item?id=29837473

2021

veged/coa (Command-Option-Argument) - Malicious owner takeover of npm package

Nov 4, 2021 | Malicious Takeover

• Original issue: veged/coa#99
• cnpm fix: cnpm/bug-versions#157

TypeScript ESM - Concerns with TypeScript 4.5's Node 12+ ESM Support

Oct 21, 2021 | Controversial

• Original issue: microsoft/TypeScript#46452

sindresorhus ESM - The ESM move

Jan 6, 2021 | Controversial

• Original discussion: sindresorhus/meta#15
• ES Modules are terrible, actually
  • https://gist.github.com/joepie91/bca2fda868c1e8b2c2caf76af7dfcad3
• Pure ESM package
  • https://gist.github.com/sindresorhus/a39789f98801d908bbc7ff3ecc99d99c
• Segmentation fault with import() instead of calling importModuleDynamically
  • nodejs/node#35889
• Meta: Native support for ES Modules
  • facebook/jest#9430

graphiql - Political stance

May 23, 2021 | Politics

• Original commit: https://github.com/graphql/graphiql/commit/7d0b7d477195ee240e0e9ac800a00d17eb91bac4
• MR: graphql/graphiql#1860
• Follow up MRs:
  • graphql/graphiql#1867
  • graphql/graphiql#1868
  • graphql/graphiql#1870
• Follw up issues:
  • graphql/graphiql#1862
  • graphql/graphiql#1865

babel - Funding disputes

May 10, 2021 | Politics

• Original blogpost: Babel is used by millions, so why are we running out of money?
• Response by Sebastian (creator of Babel): https://twitter.com/sebmck/status/1392019586833387522
  • Response to Sebastian by Evan You(creator of Vue.js): https://twitter.com/youyuxi/status/1392088730438090756
• HN thread: https://news.ycombinator.com/item?id=27114718

2020

cinnamon-screensaver - Screensaver lock by-pass via the virtual keyboard

Dec 28, 2020 | Bug

• Original issue: linuxmint/cinnamon-screensaver#354

The Great Suspender - Malicious owner takeover of Chrome extension

Jun 20, 2020 | Malicious Takeover

• Original owner takeover issue: greatsuspender/thegreatsuspender#1175
• Malicious accusation: greatsuspender/thegreatsuspender#1263
• HN thread: https://news.ycombinator.com/item?id=25846504

2019

GitLab - Hiring exclusion of certain geographical regions

Oct 17, 2019 | Politics

• Original issue: https://gitlab.com/gitlab-com/www-gitlab-com/issues/5555 (seems to be deleted, 404 now)
• Merge request: https://gitlab.com/gitlab-com/www-gitlab-com/-/merge_requests/32606
• Update blog post: https://about.gitlab.com/blog/2019/11/12/update-on-hiring/

terser-webpack-plugin - Terser v3.16.0 breaks webpack

Feb 3, 2019 | Breaking

• Original issue: webpack-contrib/terser-webpack-plugin#66
• PR to fix: terser/terser#254
• Other issues:
  • webpack/webpack#8694
  • facebook/create-react-app#6334

2018

event-stream - Malicious owner takeover of npm package

Nov 21, 2018 | Malicious Takeover

• Original issue: dominictarr/event-stream#116

Docker - Cannot download Docker CE without logging in

Jun 20, 2018 | Breaking

• Original issue: docker/docs#6910

lerna - License exclusion of certain companies

Aug 29, 2018 | Politics

• Original PR: lerna/lerna#1616
• Reverted via: lerna/lerna#1633

redis - Controversial terminology & wording

Sep 8, 2018 | Politics

• Original issue: redis/redis#5335

More dramas

HN-ratio - Hacker News ranked by Comment/Score ratio

https://paradite.github.io/hn-ratio/

• GitHub: https://github.com/paradite/hn-ratio

Prior arts and their issues

https://github.com/nikolas/github-drama

• No categorization or context on the drama, just links
• Not being maintained actively

PRs and issues welcomed.

If you viewing this on GitHub or any git hosting platforms, note that you are viewing a mirror. The sole source of truth resides in Zhu Liang's mind.