DigiNews

Tech Watch by Johan Denoyer

← Back to articles

No, npm, “estee” is not a typo of “testem”

Quality: 7/10 Relevance: 9/10

Summary

The article discusses npm's typo-squatting protection based on Levenshtein distance, using the example of blocking a package named estee due to similarity with testem. It critiques the fixed threshold approach, explains the math behind Levenshtein distance and string space, and considers the impact and potential need for manual overrides or alternative naming. It also touches on npm policy around names like audiobook and reflects on the balance between security and usability for developers.

🚀 Service construit par Johan Denoyer