Repository navigation
What's on version 3.3.3333? #30032
Description
Activity
- Reacted by Nikita Galkin, Noel Llevares, Sam A. Horvath-Hunt and Jonah Snider
We published
3.3.3333because, unfortunately, npm rejected our PR to allow versions with an infinite number of repeating digits.Reacted by Seb and Dmytro ParzhytskyiReacted by kawauso, Scott Rapson, david, Bernd Wessels, mruzek and tomReacted by Nicolas HENRY, cybai (Haku), Jessica Franco, rch850 （りちゃ）, S. B. Tam, Cai Huanyu, Ian Springer, Jordi Oliveras Rovira, Felipe Plets, FUJI Goro and 74 moreReacted by Gustav Bylund, KUBOTA Shōta, Shinigami, Kuroné Kito (黒音キト), Jeremy Judeaux, Stefan Bauer, Mihail Malo, Chris Barry, Forrest Hopkins and Chase MoskalReacted by roman and Joram van den BoezemThank you for the response. It is expected then. I'll close this.
Reacted by Florian WendelbornRyan Cavanaugh (@RyanCavanaugh) you'd have better chances with npm if you went with PR allowing such versions to be published on GitHub first
We had an offline conversation, but couldn't come to an agreement about whether
4.9999...should be equivalent to5.0or not.Reacted by Josh Ghoulberg 👻Reacted by kawauso, david and Bernd WesselsReacted by Daniel Almaguer, Nicolas HENRY, Jessica Franco, Titian Cernicova-Dragomir, Sam A. Horvath-Hunt, Felipe Plets, Florian Wendelborn, Steven, Omri Luzon, Craig Spence and 24 moreReacted by Thai Pangsakulyanont, Nate Barbettini and Forrest HopkinsReacted by Philippe Matray, hally9k, Basarat Ali Syed, Thai Pangsakulyanont and Forrest HopkinsSorry if I'm just missing a joke here, but I'm probably not the only one still confused. 🙃
Given that automated tools like Greenkeeper/Dependabot etc are now recommending upgrading from
3.3.3to3.3.3333, is this new version legit? We're trying to audit this from a security perspective, and this kind of release is unusual behavior for semver, etc. Also I think this version probably blocks any automated upgrades to3.3.4since 4 is less than 3333.Besides this issue, I can't find anything relating to what this is or why it was published, and there are actual code changes in the diff between the the
3.3.3and3.3.3333versions.Reacted by Jérémie Astori, Dave, Sam A. Horvath-Hunt, Daniel Ruf, James Skemp, Paul Berberian, Liviu, Damon Lundin (IBM), tom, Roman and 9 moreReacted by Qwerty (Vítězslav Ackermann Ferko) and 天官赐福Sorry, humor aside, the new version is legit.
Reacted by Jacob Gillespie, Jessica Franco, Alex Dunne, Leonardo Ascione, Steven, Resi Respati, Avinash Dwarapu, Bernard Vander Beken, Anton Ivanov and ClausClausDoes that mean there will be no version
>=3.3.4 <3.3.3333?Correct. Any future version on the
3.3line will be something like3.3.4000Reacted by Jacob Gillespie, azu, Jessica Franco, Sam A. Horvath-Hunt, Felipe Plets, roman, Avinash Dwarapu, SlurpTheo and Anton IvanovReacted by tom, Manuel Astudillo, Dan, kawauso, Will Mitchell and Bernd WesselsReacted by Satoshi Amemiya, Florian Wendelborn, zaoqi, Yuya Tanaka, JJ, Dom DiCicco, Kevin Brey, Qwerty (Vítězslav Ackermann Ferko), Jordi Oliveras Rovira and iulianalbuOr more likely
3.3.33333given what we've already done tbh.Reacted by Titian Cernicova-Dragomir, Daniel Rosenwasser, Sam A. Horvath-Hunt, Felipe Plets, Sarun Intaralawan, Patrick Kohler, Gustav Bylund, Florian Wendelborn, Steven, Michał Lytek and 11 moreReacted by Thomas Mur, Qwerty (Vítězslav Ackermann Ferko), Jordi Oliveras Rovira and ExE BossReacted by Paul BerberianReacted by Daniel Rosenwasser, Felipe Plets, Sarun Intaralawan, Gustav Bylund, Steven, Musab Kurt, roman, McGiogen and Forrest HopkinsReacted by Jessica Franco, Daniel Rosenwasser, Sarun Intaralawan, Gustav Bylund, Steven, Musab Kurt, Shinigami, Arek Klein, SlurpTheo and Forrest HopkinsMissed an opportunity to have
3.1.4159🤔Reacted by Daniel Rosenwasser, Felipe Plets, Aaron Dancer, zaoqi, Jeff Fairley, Cameron, AsukaSong, Fern 🌿☕️, Remi Cattiau, roman and 26 moreReacted by Ryan Cavanaugh, Cai Huanyu, yw, Jordi Oliveras Rovira, zaoqi, Malcolm Lockyer, 0b5vr, Yuya Tanaka, Takuma HANATANI, KUBOTA Shōta and 25 moreI know you guys don't believe in semver but now you have to introduce floating point errors into it? I feel like this change is just 1/3 whimsical.
Reacted by Daniel Rosenwasser, Steven, ayanamist, Mertcan Mermerkaya, Noel Llevares, Joram van den Boezem, Mihail Malo, Danilo Fuchs, Alex and ExE Bossthinking
讓我想起了Microsoft Windows版本號，雖然我現在不用Microsoft Windows，也不用wine，同時也在試圖刪除GNU和Linux和BSD（指我可能將實現一個運行於ARM,Intel芯片之上的整個內核作為一個我設計的編程語言解釋器所以不一定需要MMU的內核及操作系統）。
Missed an opportunity to have
3.1.4159we can still have hope for
typescript@3.14.1592Reacted by Royston Shufflebotham, SlurpTheo, Forrest Hopkins, Noel Llevares, Qwerty (Vítězslav Ackermann Ferko) and ExE BossReacted by huadong zuoReacted by Titian Cernicova-Dragomir, Malcolm Lockyer, Mateusz Kasprzak, Yuya Tanaka, Kaier33, Kristjan, Musab Kurt, Henrik Perrochon, Daniel Rosenwasser, roman and 9 moreReacted by Daniel Rosenwasser, Shinigami, Daniel Wei, Sanghee Park, Mihail Malo, Thai Pangsakulyanont, Danilo Fuchs, Qwerty (Vítězslav Ackermann Ferko) and ExE BossThis version number is in no way a joke I can appreciate because I literally spent a few minutes reading this issue and 2c02f13 trying to figure it out only to find out it's really meaningless.
Can we stop this from happening again, please? Thanks! Daniel Rosenwasser (@DanielRosenwasser)
Reacted by Jacob Gillespie, zaoqi, Thomas Jacob, tom, Łukasz Wójcik, huadong zuo, Edmundo Santos, Matt Greenfield, Manuel Astudillo, Johannes Koepcke and 9 moreReacted by Eric Martinez, Shinigami, Ariel Saldana, Trotyl Yu, Daniel Rosenwasser, Max Cerrina, 양종률 / CX, Mr. Pill, Kevin Berry, Joram van den Boezem and 7 moreReacted by MaceWindu, Joram van den Boezem and Qwerty (Vítězslav Ackermann Ferko)Not very professional, misleading, irritating. And not consistent in terms of semver. This is why people outside the JS/TS community are taking it not serious.
Reacted by Adam Lau, Dr. Jochen Manns, tom, Łukasz Wójcik, huadong zuo, Aleksei Lebedev, Matt Greenfield, Manuel Astudillo, Tom Hellstrom, Jozz and 15 moreReacted by Eric Martinez, Trotyl Yu, Titian Cernicova-Dragomir, Daniel Rosenwasser, Max Cerrina, 양종률 / CX, Mr. Pill, Dom DiCicco, Kevin Berry, Francesco Infante and 22 moreReacted by MettbrotReacted by Asfalots, Thomas Jacob and mruzekI would really like to know how many developer hours have been wasted worldwide investigating about this version number... with great power comes great responsibility :)
Reacted by Tom Hellstrom, Ken , Emilian Patrasc, Sören Schwert, Sebastian Kosch, Nick Ng, Will Mitchell, david, Bernd Wessels, Thomas Jacob and 9 moreReacted by Kyle McNally and Dmytro ParzhytskyiReacted by MaceWindu, Chase Moskal, Ken and Qwerty (Vítězslav Ackermann Ferko)Reacted by davidNice to see that other professionals still use their highschool homework versioning systems as well.
Reacted by Jacob, Will Mitchell, Jewel Andraia Darger-Sacher, awmleer, Untilbit, Qwerty (Vítězslav Ackermann Ferko), Jordi Oliveras Rovira and ExE BossProbably in semantic versioning is legit, but it is strange
So many complainers. I came across this issue because I saw the joke in my NPM logs and I wanted to know where to direct my appreciation. Made me chuckle. We don't need to be so serious all the time.
Reacted by Titian Cernicova-Dragomir, Daniel Rosenwasser, SlurpTheo, Chase Moskal, Qwerty (Vítězslav Ackermann Ferko), ExE Boss and Dmytro ParzhytskyiReacted by ExE Boss and Josh Ghoulberg 👻Reacted by Daniel Rosenwasser, Qwerty (Vítězslav Ackermann Ferko) and ExE Boss- locked as resolved and limited conversation to collaborators
on Oct 21, 2025
My apologies if this is not the right issue type. I just think that needs urgent attention as it could mean npm is compromised (which is not unheard of).
I got this from my project.
Surprised, I went to the npm page for typescript and got this.
Is this expected?