Hacker News Reader

I find it interesting that nobody noticed this before public release. And apparently this version is a pre-release? But that isn't specified on the blog post?

View on HN

What's more, while "npm install -g npm" correctly installs 5.6.0, "npm update -g npm" installs this apparently pre-release 5.7.0 version.

And even worse, 5.6.0 to 5.7.0 is, by semver, one minor point release to another minor point release - no breaking changes, no major bugs. 5.7.0-pre would raise some flags.

Uhh. Does semver actually say anything about bugs?! o_0

I'm pretty sure you don't release pre-release versions without -pre or -beta or -rc tags in the end.

Technically you don't have to with semver, it's just a good practice. From https://semver.org/:

> A pre-release version MAY be denoted by appending a hyphen and a series of dot separated identifiers immediately following the patch version.

Note that it says "MAY" and not "MUST", so it's optional.

I'm pretty sure that "we're now changing permissions willy-nilly" is both a breaking change (which would warrant a major version bump, as per semver), and a bug (even though it's presented as an improvement by the authors). I should have been more clear.

Reply on news.ycombinator.com