Unverified60% confidenceEventExact time
In the 2016 left-pad incident, an npm package of only 11 lines of code was unpublished by its author, causing the builds of mainstream projects such as React and Babel to break for several hours, and directly driving npm's registry immutability policy.
2
Sources
60%
Confidence
Long-term
Relevance
7/17/2026
First Seen
Sources
Related Claims
VerifiedIn the left-pad incident of 2016, an npm package of only 11 lines of code was withdrawn by its author, causing the build pipelines of mainstream projects such as React and Babel to be disrupted for several hours84% similarUnverifiedleft-pad事件促使npm修改unpublish策略——发布超过72小时或有其他包依赖的包不能再被随意删除70% similarUnverifiedUsing npm install --ignore-scripts can prevent scripts such as postinstall from executing automatically during the installation phase.68% similarUnverifiedruleherd's stale-reference check is deliberately conservative, preferring to miss detections rather than produce false positives; its first version falsely flagged @types/node as a stale file reference and pnpm install as a missing npm script.67% similarUnverified2016年npm上left-pad包被删除导致全球数千项目构建失败63% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/547367API
curl https://kongchang.com/api/v1/knowledge/claims/547367MCP
get_claim(id=547367)