Relinquishing of the hello-express template

I have some concerns about relinquishing the hello-express template. After a few years of using it, some might just use their browser’s history autocomplete to remix the hello-express template. Personally, I use it as I still like using express over fastly most of the time.

However, if someone were to, say, take the project name and add some malicious code, any innocent user could be a part of some sort of botnet and have their account terminated. Of course, this is unlikely to happen, but still.

2 Likes

did they say they’re relinquishing it?

1 Like

We’re not deleting the name/project or anything if that’s what you’re worried about!

1 Like

That’s super weird, when remixing the hello-express project earlier, the server.js file shows this

But when remixing it now, it’s fine?

Earlier, I’ve remixed it, and as you can see here, the chain points to a0fcd798-9ddf-42e5-8205-17158d4bf5bb, the project ID for hello-express
https://api.glitch.com/projects/dirt-shimmering-hunter (my project that i remixed from hello-express)
https://api.glitch.com/projects/a0fcd798-9ddf-42e5-8205-17158d4bf5bb (hello-express)

my project:


hello-express

A few weeks ago, a random blank JavaScript file (in spanish) was there, but nothing else appeared to be modified. Now the server.js file is completely different than the original.

2 Likes

I rewound it after seeing it - we’re already looking into what happened there though. It may have accidentally been added by one of us not realizing we were pasting into the app. Sorry for the trouble there, we’re way more careful with our official Starters!

4 Likes

Thank you so much!

2 Likes

I do wonder, to prevent future incidents maybe it might be helpful to transfer ownership of the starters to one account and add access to the account when needed, however this does add some inconvenience but it’s better to explicit rather than implicit here.

3 Likes

Well I wouldn’t consider this an incident with the starters because hello-express is not an official starter anymore, but your feedback is noted!

2 Likes

is this the first we’re hearing about it no longer being an official starter? previous announcements about fastify starters etc only say that new ones are added

3 Likes

Our official, regularly maintained starters are the ones listed on glitch.com/discover

1 Like

cross reference Can we have the old Node/Express template back? - #3 by jenn

thanks for the statement :confused:

thoughts and prayers for the integrity of official projects that have gone unmaintained

2 Likes